Sign inSign up
FleetConfig Controller

dhi.io/fleetconfig-controller

FleetConfig Controller 0.4.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips-dev, 0-debian13-fips-dev, 0-fips-dev, 0.4-debian-fips-dev, 0.4-debian13-fips-dev, 0.4-fips-dev, 0.4.1-debian-fips-dev, 0.4.1-debian13-fips-dev, 0.4.1-fips-dev

Index digest:

sha256:03022fdc0889978765ade37661b39b27e4bacbd78735c7be55105bc04c1cb01b

Manifest digest:

sha256:3844f327f4360aab43a14baf7dc01abd263bead9f2bd3b2b15fd858e7c44caed

Size

91.43 MB

Last pushed

14 hours ago

Vulnerabilities

0
2
1
25
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/fleetconfig-controller:0-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/fleetconfig-controller:0-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/fleetconfig-controller@sha256:4e95a989eb4f90e112cf2ca16ef14b36264a74af56ef39cb645f7999a8a0201d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/fleetconfig-controller@sha256:75dba593fd366a97c35d6d38edf70e6f8b998851a1c3de422fbb1c506e143b05
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/fleetconfig-controller@sha256:13744b7bfa44d37fdfadbd1882d1f322e3757a3e46505e26ee8f12f7f1c3f138
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/fleetconfig-controller@sha256:852eb1363e8e0000d2a5b67c29ce151f79797f9350bb5b21f17f280ab8c4b85a
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/fleetconfig-controller@sha256:6f1e4c17c980836cef1f810d7cdd42f1c0cb612a6b548e2ddeab7eaedfb16411
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/fleetconfig-controller@sha256:3b681e16988af78d2376fb6ea89ba571e23e7988f3846190550cddeca8ce7bb3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/fleetconfig-controller@sha256:ade076b2baa4e640348aebf3f1eacc5f522c7fc8634fe47d727c90b3a86336cf
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/fleetconfig-controller@sha256:a64373009b4fba480e2d8102480965f0c180fe5b5f26d6fdfe5482c85d6abfda
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/fleetconfig-controller@sha256:58460202da8418f0111d84308da8daaaa98143aec1f529a3829a9ead715a5d11
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/fleetconfig-controller@sha256:b2334c63d57a8e3c1bb4f1ef48c1fde4ca92a9f0522c5dda45d0b3513c9067d5
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/fleetconfig-controller@sha256:065c6849790eb93f7d121074631ddcb25c122f94830a180bfe6c834bee27a199
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/fleetconfig-controller@sha256:88426ea20d9948ef36d5d9b2cda33a36f0446862b1ffcf362275d59e2b783d5b
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/fleetconfig-controller@sha256:72d8c4d74c3775a46e41453638dc3f1e8a0ef105d96b4f3270939ce70807a34d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/fleetconfig-controller@sha256:d70686f767b24d35df6776e7a4cd05dd8d2c03ad3ed65ede08d76bc55f675a44
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/fleetconfig-controller@sha256:d82f0ccc54dece1043641a5260bd8ea9608c1b4e523ba8b8fbc9e6c6403323fa
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/fleetconfig-controller@sha256:0af048c05ba7fb1ca52878a98b8f3884bed84b2b4481c1410804cc4addc5a9d2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/fleetconfig-controller@sha256:64e25968cb767cfd70f046c0b4b811cd6ac31fbdb7ab78efa58aa405a530a102