Sign inSign up
Dapr Injector

dhi.io/dapr-injector

dapr injector 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.19-debian-fips-dev, 1.19-debian13-fips-dev, 1.19-fips-dev, 1.19.1-debian-fips-dev, 1.19.1-debian13-fips-dev, 1.19.1-fips-dev

Index digest:

sha256:f2612a2d70495190f6404e52462101b3df40a8895d21bd6ab9dc2de36ed9d3dc

Manifest digest:

sha256:141ed23fe03698e0f3fe4a19af73dd1b17590e95410ff03bbb9ac2b7b5e0f55d

Size

51.42 MB

Last pushed

12 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/dapr-injector:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/dapr-injector:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/dapr-injector@sha256:a7cceed8e31c55d1fbd7ac901d70ee3a7e28e78a38b16d691611f38ceed2d4ad
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/dapr-injector@sha256:58a09689c56b950a118199a27d56a961898f7a979dac908b7201eaf89f346b3a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/dapr-injector@sha256:213d2129181027af30a0d6fe5242dbfa0b41be7799cf8edcf6304fdb064312eb
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/dapr-injector@sha256:7afca72614360c80656dadfb48f884213e733c7fb43ae28be626814faf4d822d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/dapr-injector@sha256:4ae124439e1675dd73f1071d1d2ccb6622f1c84f9eb407be5cca938903099be8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/dapr-injector@sha256:4974e6b620410423c4e982f7784959c55745dcadbad4fbc34489232f6b4eea9a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/dapr-injector@sha256:c22813e579c412164e8ac190fe71b485afd754de0f97b091184ad86f2de1e565
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/dapr-injector@sha256:81a7270db8366eec2c7ac68fd6f3380470eb631279f9dca05fd1cce17e6bfe5c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/dapr-injector@sha256:5cc19c8b9b5d424f0bbf4942fa2d9f26b6268335c957328f0d7f3370ebadb656
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/dapr-injector@sha256:da4df72d76e38771003228bca8d31a26cae5660da089df7c25ba17b89f00feda
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/dapr-injector@sha256:8358436380d6c73e29646766876a50c0fa6a0cba429a0767562ec47d6e4c56ee
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/dapr-injector@sha256:918506ac6a7b084ebdcb6675547e911a84d869d5e42908b588b94332f00330c3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/dapr-injector@sha256:8d0e73c81bd2dc0e53db2a162c353d738f6aeedc93dc7584109e2f185e1b48c6
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/dapr-injector@sha256:7d67561efb8bad9fb3c8b14b2ae1b664483713e45e2d4b53969028d83e5dc46e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/dapr-injector@sha256:b3ab3967c4a59866f98fdcf71f790854d503dced0fb0b669fc2984c5fdacd632
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/dapr-injector@sha256:303d5bc6759ce6613b82f84e9a7c77a2d19b0853de55a0df59df7017cf1f9d8a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/dapr-injector@sha256:d365248fb7bbba212c310172ce440eedddabaac97a788076f96f81cda4828953