Sign inSign up
Dapr Injector

dhi.io/dapr-injector

dapr injector 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.19-debian-fips-dev, 1.19-debian13-fips-dev, 1.19-fips-dev, 1.19.1-debian-fips-dev, 1.19.1-debian13-fips-dev, 1.19.1-fips-dev

Index digest:

sha256:27bf821dd9761d258291223efcec36749cc3c68d7986a016e712bc30281f9de3

Manifest digest:

sha256:3f7e06c5e8e6d3336ca335d9ebe0bf3dd9e530e09ef5577b5033ce72dc648b21

Size

51.42 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/dapr-injector:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/dapr-injector:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/dapr-injector@sha256:e05f3ff18fd6a71ddffee2cef63a24f26de826314fcdcf439f4c8ac51df68f42
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/dapr-injector@sha256:89d8ec11757d6988fee7b27dab75ef0e2afa61f3963e445a3c624f15c8413653
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/dapr-injector@sha256:3c5bef792c2c447e248ccf1f1fb9380c6c0cacb6bc5758ad5f5f93c0079d5278
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/dapr-injector@sha256:24cac0df8886fc9f0265c7780f69dabda63bf8595060c60e1a53a4a14659feba
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/dapr-injector@sha256:4b1f12a1550d61da9dfc99babceddb48b0aed7842f3573df15d2d257858901bb
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/dapr-injector@sha256:8f25fc12a0f4292e27166b3840e2d51790d6b06e68c4126670a2020672469d9f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/dapr-injector@sha256:271d21481d6dd110d90c39ab3a575ffca1c8a0877920191170061ed0dce9ee6f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/dapr-injector@sha256:4bba2c4d3691c874bc79bbe7330995e37494419e294373b63e964af44dc6aed0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/dapr-injector@sha256:f7020bb89144cd604ee3f9e1bedaaee38d3252b334972b64bc133079ae0e87cd
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/dapr-injector@sha256:4a1f00f711edc0845454e3a373cc27220535d80d042269f572cf32a9af054ab8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/dapr-injector@sha256:0ce3353cc1715a654d751f2f925b29019667624ccc4f70622556c5500ff6d8c0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/dapr-injector@sha256:e4f583e36bee249a6aaf2f3b2fa614ce8c6af9cbc874139b9532743ab0e53604
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/dapr-injector@sha256:e0ec58d47ac385468905a35925f4a237cac77ad99b356b16c9cdaac2821352f5
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/dapr-injector@sha256:55844b38f9388052beca30384f588243d8e650ec7e2aae80194b32323bc76f0e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/dapr-injector@sha256:afd43515f687c865fdaa81adc65bc7b025de9f89503cdba8fbcb8e4096ad255f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/dapr-injector@sha256:4ef227c7c9470efdd7b7a4647bf0496e19a2d40278e737214cd7d7a403173032
SPDX SBOMhttps://spdx.dev/Documentdhi.io/dapr-injector@sha256:e3f64b4a9b17044a864c88f260f1a15c96114cc95aa504bb9132543876f3f317