dhi.io/datadog-operator
1-alpine-fips, 1-alpine3.24-fips, 1.31-alpine-fips, 1.31-alpine3.24-fips, 1.31.2-alpine-fips, 1.31.2-alpine3.24-fips
sha256:e00d1ec0658111afb4ce28e457c4b1a1db3be84a4a482f17b0b2f5cd3d52a1fd
Manifest digest:sha256:eb806bce524dee9852c3a96400fe952b79f2cb8ade0eb4a06051df9a6ab7b131
Size
36.78 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/datadog-operator:1-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/datadog-operator:1-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/datadog-operator@sha256:464cf15bb805bc1ebe926e840d6e232e03772c5e5eb6b7f4ca8942a24d683e78 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/datadog-operator@sha256:7b72c36153abe2b1e2ac051b66f6871e89a4738263144ea1c4027d612c843c8f |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/datadog-operator@sha256:3138494f93052aabe65e1ef45fe34e0bd2d2e57284e311ae69cae4760c2294c4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/datadog-operator@sha256:a3e0f8676c08c1b273980d8d6d5e05615a46bed362d3c39d562c1f706b9112b4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/datadog-operator@sha256:a853e78f3c42a0b660c0e599fab92eba103151ec2a6e205c2ff0061da7cb9a3f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/datadog-operator@sha256:d3c0aebc09bf55c021e1e7a3ea8e51eed8f51592b58b908154f3082702c48807 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/datadog-operator@sha256:d72bdfb8f8119c3e0a0f36b4e3fa4b3f8b949416e9b2c21997209d1c71a7e769 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/datadog-operator@sha256:ad5a70ef9d3aa2fbd2dbaccaf61df85b78ecc55e7621efb6d9351784936c63f5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/datadog-operator@sha256:abe984fc97c594ff99fbc7cac38fefa86fdcce82ab3bd27968caba983c74e484 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/datadog-operator@sha256:f374bf3c1d1b649d0fc93e169749905e3ddc3c573c73954b963ccce2039c86d0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/datadog-operator@sha256:077d8c3f29cebd2438fb200ecf0c3e62cb62c29f867084f31f4f4073d07bfe5c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/datadog-operator@sha256:064700474d6e387cfa952324c1656979cd4b07125b687b92333e22de72b23c41 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/datadog-operator@sha256:f0358cf2017c53c36ff8377b12839fa1da6deab20e70ae4a499242a068acea3d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/datadog-operator@sha256:ef3f78dace509b5f8f5d955550e3becc4b2fd96ae917723f2bed24c2ec1c1c60 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/datadog-operator@sha256:e9dfe5b24e770efbc4c259eaafec68a227f94b3f0651db537408d9e97ffabbec |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/datadog-operator@sha256:9346b4f0b1838e3ebfa452383af76d0d82c524ae1e081bc294b8952524b4254e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/datadog-operator@sha256:f4ecca32585a838e3eb1b86674512053ab8463cf2d39304c675aa659e250762c |