dhi.io/datadog-operator
1-alpine-fips, 1-alpine3.24-fips, 1.31-alpine-fips, 1.31-alpine3.24-fips, 1.31.2-alpine-fips, 1.31.2-alpine3.24-fips
sha256:20dd41a04f4390a2c61bb478d246584e9b8e1447dd2f57c00baee33b90432ead
Manifest digest:sha256:2c347a642380f101972d2c0781a8dd412ebc5e6122a3fdf059839fa77781dfd9
Size
36.79 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/datadog-operator:1-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/datadog-operator:1-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/datadog-operator@sha256:b1d798dd64a38dacec98978b6f8d37e174cb7a74093da8807a86806a7b4f2096 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/datadog-operator@sha256:513a69b5bf05f6f0961f78a40dccb4b716c71839d4e0489f4944502bf1ad1c74 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/datadog-operator@sha256:bd41cbe7ce3c3f5c47b4e8eaf02123ebf84370697d70b4c446fe3af174f4aa8f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/datadog-operator@sha256:95a5c5080fc08a8a3da860a0893357a03379a50f656200d162c6bd1e23aa5efc |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/datadog-operator@sha256:3859e65fa0e033c86451b432a18a7fcfc95528e7354e71f196aa3dca26b800cc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/datadog-operator@sha256:cf7331836c67cae7f693ba5ad2b41b7189da70f142aeab6db6573b2116e28bb5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/datadog-operator@sha256:5731ab66a41f25ef5e501d414596c6c183b44c597a51f200f024c5a6da23f623 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/datadog-operator@sha256:eeaf1aaacf4deb2ae029905651290161ecbad1ee1455260556f126b3f2e3b51f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/datadog-operator@sha256:c9ffc9406eb5abc1d655c39599e68662bbd6d604b0a4707c6a8abce74c63c2d0 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/datadog-operator@sha256:19c9e1afa0a8eb1c36859e566f6e6b1d816ae5b1634070c450599c45607054e2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/datadog-operator@sha256:7ef7f5e7e70ae5497200095c5c9fae6f5a088f23b1065e26d7bf9f88b243d1da |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/datadog-operator@sha256:e5f063488a5d405979f71831930f512b71bf909daff3552de1b8b953406991a9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/datadog-operator@sha256:0514fb36ce80a91aeb27fa02b01a9c0e112b2966d54dc21c63af872d70bfa5a6 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/datadog-operator@sha256:aec162c85aeb1246e2103c66afc7e0d99df945dac87d731d2717a1b34bae0c36 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/datadog-operator@sha256:17688c91dd5bf764b70ef3b2dbb05a91ebc6aac539977368e059c01d65fcd9b5 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/datadog-operator@sha256:53c6a8dd88e970e3119322f8ddc5fa44e4d85e2cab9d4c4fa4973daf0d30d810 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/datadog-operator@sha256:2732d22801ce8b9804ae9c2fc58e9f623210079e790ccdd437ee7a013071a3e0 |