Sign inSign up
Dapr Scheduler

dhi.io/dapr-scheduler

Dapr Scheduler 1.19.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.19-debian-fips-dev, 1.19-debian13-fips-dev, 1.19-fips-dev, 1.19.1-debian-fips-dev, 1.19.1-debian13-fips-dev, 1.19.1-fips-dev

Index digest:

sha256:41f0d571e94bc70a8ec1718498a4c8c2b82d86dc65b7eb02db406a2eb576980b

Manifest digest:

sha256:a9fff697ca8d92632f78891e30be6b704b7c5387923af873141b793865356ff4

Size

56.66 MB

Last pushed

12 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/dapr-scheduler:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/dapr-scheduler:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/dapr-scheduler@sha256:1f6ee06e6f08eb8dcb2e73e53d8f519519f275b848c2d90b6b1a5e5d8ea2dd86
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/dapr-scheduler@sha256:254d5613843a54c3ed1c5461bee9b2a126a105063646099710cf5680683faab2
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/dapr-scheduler@sha256:72ce2f5de2a2e4e620acfeb555b30ecdbed8680def26df8e6700cf1a53a8040b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/dapr-scheduler@sha256:1fe7e128eaccdf00c91f912b5cad8c7d427a00604752b8d1f90b8bd242848ea2
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/dapr-scheduler@sha256:a51f5d2b705f7a2531f164b1b225fe01e689c63c07880d7a22f16699dc8985f4
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/dapr-scheduler@sha256:d63f0d1c6367b83e30363f66b09d463e61fd8e5e586927ac69a6df67bc4cb421
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/dapr-scheduler@sha256:e09ef0f9786573aa99cf94541ff57e920db16e452e7d309de5a2c36621bf39f6
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/dapr-scheduler@sha256:99f5b10a18e22ec65e2d1e1537361c5589b538f80182a9fe1b9365d8391f3f87
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/dapr-scheduler@sha256:fce22034462a7e2da5f6c80d5d0959ecde8ff2b3616695014ad3d02cc53334b4
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/dapr-scheduler@sha256:de5f56508a30a4af22be2df55b036340730fa590c84bbcee9d4ee30c7348543c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/dapr-scheduler@sha256:cf12098cb76d82bfd484f9123f980466632e2daa0daf45bfcf212fe9fb975179
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/dapr-scheduler@sha256:6d4849f21c6eca141b114caa8bed995bcfc0c8700b496fc396e1555a2375a5f7
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/dapr-scheduler@sha256:99b5dccf31a41a7175146594ec03793fb0233a755a3b3634f333190ecc8f4fc4
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/dapr-scheduler@sha256:bc643da9a85ad2f68d2b773bbf459616145b552d9c89ab9058a5a680d6225701
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/dapr-scheduler@sha256:393af6ea7e08e5c1ac320db1fef97a2ebc6fe2cacdd7db84969d38e2a8e493eb
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/dapr-scheduler@sha256:7ee1f3a58a5e7fe8c956d529b24d2c9afb900c138a22da5432d8c2d2d6d2146c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/dapr-scheduler@sha256:056d3b91ca86d7703303e476444c32642c925b3da042c6805390da1d902be01f