dhi.io/cdi-uploadproxy
1-debian-fips, 1-debian13-fips, 1-fips, 1.66-debian-fips, 1.66-debian13-fips, 1.66-fips, 1.66.1-debian-fips, 1.66.1-debian13-fips, 1.66.1-fips
sha256:5c9785f07e62f88c952b34b5d081c6ea1c59f1b05cd138cdc42a87a62070a085
Manifest digest:sha256:d5dc3c333332a00ba954705a60dd956daf8495bc7f385ccae3a70c1f10b6dcb3
Size
21.07 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cdi-uploadproxy:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cdi-uploadproxy:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cdi-uploadproxy@sha256:d4e2579fa88d94e0af32a0a6c0142ac69047c73ab7adafdf503b8afe88836783 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cdi-uploadproxy@sha256:f9269117eff8ec73a6373672123f99078d19bca518e148cfd0ad2493ffd660fe |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cdi-uploadproxy@sha256:80e66474b09bfee3c856ff67be984b9b33d9c3862d80f9cbd5cca9b297699ee6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cdi-uploadproxy@sha256:35bd93c5a052365d24bb5bf03842d3f6023fefc04523e031f0791451ca02a78c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cdi-uploadproxy@sha256:f717f9009d6deac37b08d0b59b87db1b954aa4f27ab30db3cf993c2ff81b70bc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cdi-uploadproxy@sha256:7f2858514012494c7f0837bc29e6cd3c93065c36fc4f486050646f426c7a88fe |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cdi-uploadproxy@sha256:afeb66588529f96f3f9a7b8930a0a97125e5f7b22287a059817f989db14edcec |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cdi-uploadproxy@sha256:79b7148a8db5290fb092e2eb616200dbc2a048671e9df1faf551985d7273e801 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cdi-uploadproxy@sha256:6b5f9aedb683db552047634da0074e88e112786730cfdbeace069fa1bcc745d0 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cdi-uploadproxy@sha256:8e3c643ca96a17d0bf5bed4dba180f0ae25e9d3ced612fe2e12c9ad89149bd75 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cdi-uploadproxy@sha256:396a8f8698e0658f458377c9187aacc12d4d9e65c80b128711bcb0a986b5c7c3 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cdi-uploadproxy@sha256:361e4183b459b5f8902833a60f67630d3c17fddfb972273286442e74ebbaca1c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cdi-uploadproxy@sha256:cf4ec6c447a0eb8ead034559392e880c985fcdc35a0c941de4d59f47e4ef3f3f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cdi-uploadproxy@sha256:0f4a1827bf25cd63d0fceabd1bd32e68811e3d7e8d6abe5c2610c720dcc93f45 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cdi-uploadproxy@sha256:1bbe91a3419667b11d4504edfad8d069fda1c0f7f3d2423b7cdcaceab7bd47c8 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cdi-uploadproxy@sha256:a5b33c3d5244bda5c5bda3aa765d1044cdf711293280a1bf38a37e9edd62e4a1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cdi-uploadproxy@sha256:86693ebf479821c73614af85b3d235f0d8b8a99d9ac3aea0ce5b7fbfc321db78 |