dhi.io/datadog-operator
1-debian-fips, 1-debian13-fips, 1-fips, 1.31-debian-fips, 1.31-debian13-fips, 1.31-fips, 1.31.2-debian-fips, 1.31.2-debian13-fips, 1.31.2-fips
sha256:3fb0d0daa8e8ba760f2e3dee4c0973b8d3b203a84631d4bf2e943c426e517ba0
Manifest digest:sha256:75dbcf4096acfa51ef3aba7dd4b1a731b51398ce66cb0f4ff43efafb58c1be69
Size
41.86 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/datadog-operator:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/datadog-operator:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/datadog-operator@sha256:e58f113ac7630c7f0146f8b0adbe62fbfb9fd0909cdc3a3d3c340b516790e01d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/datadog-operator@sha256:83f1dbf78ad897b66bba6c459f0fd0ff40a38bf5f12ba093eb99ced384b0d32a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/datadog-operator@sha256:18f7704a2af583a7de927c63b6d6ef12d14e2c6e0122654ab8cdf669395fde51 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/datadog-operator@sha256:a6cf4a43c31708fc8a020f8d38e45173cd99bf1118dfb13b3d43b5a3774bc7a5 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/datadog-operator@sha256:ae051246ff598bab02377472920aa5953bfb5a73998b96ca1edeef7a46c448a1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/datadog-operator@sha256:79766a7e643fc48f82a2daf157dac0ad740061f84237e8d8906074884a0da2b5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/datadog-operator@sha256:086be2fe873cd0e8fc4d86867348ef0cf0f2a6ea8ac3c4f2420f6edc3228d631 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/datadog-operator@sha256:5dba1e5259229d24b2ec89b927b6229b44540dffb21c56bb0bff02b05331c6c0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/datadog-operator@sha256:f629e3bf58c89f011317966bbafd8f6ba990f0009616649e7976846d469fd573 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/datadog-operator@sha256:24c9a9be9f4ecb06f98990dc126680c099f2bbefbbc88dd93f91b7d75ad474b2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/datadog-operator@sha256:efcec6903bac2627b8cd6f9b35e6768b83cfb2bebb0d7aed62d4ea3a5d805593 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/datadog-operator@sha256:d5e63f8f65b0489a1547efca48a2a40679f66c1dcc62532d99d1c8df485b5b72 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/datadog-operator@sha256:28fccaf2dd4e5f6fb7dfbcd4fb3e00078f13f8aaf939b8f2c35e208932a37209 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/datadog-operator@sha256:ee02c3302e00c96609955a18ee026ed156d55f573ebf2f102c51c97fabf46763 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/datadog-operator@sha256:1131d4b1726b7b307d2936e1bb8186abb3343172ac62aae7bedcf935ce77075e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/datadog-operator@sha256:46aac02aa0bf2c83d7549673d2f22fd4c9ecff457e9471b6539b68c592b17e1c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/datadog-operator@sha256:e79da57dcff84e8bf564b7b10f8adbc7334079503b6b32a3d0bd92e6f1630942 |