dhi.io/datadog-operator
1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.31-alpine-fips-dev, 1.31-alpine3.24-fips-dev, 1.31.2-alpine-fips-dev, 1.31.2-alpine3.24-fips-dev
sha256:b1f88ee5c9894b46c5d9efa40e8421b46cabaf7cecb9dfcd1286f252b25d31b1
Manifest digest:sha256:43647143a045ebcd21ca643cf425fc73d70a4a6fd4b45b1b5e7b829458a980e7
Size
64.75 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/datadog-operator:1-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/datadog-operator:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/datadog-operator@sha256:6fa48069b6861636fa9c3435cb0dfd59b3477297acfde8755dc8e2a592445f30 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/datadog-operator@sha256:8f3e5d6527f20a903446a6847975bb00da548ffe056f76962d4dda0b1565d675 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/datadog-operator@sha256:fe8e08aaadc1316f286754113664c1a7343ddda45b162e7f896acc6a84d85929 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/datadog-operator@sha256:6fde1d415cab2306472219a73fee13fc43e666027a7c694d5fd726974c7d7242 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/datadog-operator@sha256:61b3aa267b6ed8172cda01c5780324df4e66c85ee2dd3f8eb0e8de76fc7e3b97 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/datadog-operator@sha256:74cef949c402107e6feeb41e374044379cad2c43e5f993e19f7a0935d567e4a7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/datadog-operator@sha256:531d2a007538ca3083624d2f9dcea2819702c799e44bf214a3ebbf20da954219 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/datadog-operator@sha256:9dc01e6eb267cddc777a18d274696fa6ff926b283d12193c93384078b8c7f70e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/datadog-operator@sha256:e21f7edb74457469ffcb5320b279b425ff4c3c7e7741ae0a1659d37898510972 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/datadog-operator@sha256:78c972d7b4c3a122a1354d2058ea82dec1886aa7f0c7dad951cb365eac131f8c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/datadog-operator@sha256:1d2db2094d466ddd77420d68fa31933a6538eaa8ace14107328b756fa896fd21 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/datadog-operator@sha256:1f6d73c2a5c657fab90557e3cdbef52d49e8f9b2f9f83334ab3ede1fdd7515d3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/datadog-operator@sha256:42919cf0a5ae44ca1ce0e4c230e8346d06b5dfabff2cd82db0b7644a721ae4c4 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/datadog-operator@sha256:57bac4053f92be994f41380f2cae540698949a7afb786f3022cf18c391ad7f64 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/datadog-operator@sha256:18f7c71161fc245e245272dc990d8662a83ec5cd1fcd444cbf3b4a2a4fb38468 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/datadog-operator@sha256:9f102fdae679b6e16b3c9152037bbea9afdde11313cae962ee78b830dd0bddae |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/datadog-operator@sha256:e162c149e083e17094da37260fde92890f5c675776a17e77f8e020492c0b997b |