Sign inSign up
FleetConfig Controller

dhi.io/fleetconfig-controller

FleetConfig Controller 0.4.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips-dev, 0-debian13-fips-dev, 0-fips-dev, 0.4-debian-fips-dev, 0.4-debian13-fips-dev, 0.4-fips-dev, 0.4.3-debian-fips-dev, 0.4.3-debian13-fips-dev, 0.4.3-fips-dev

Index digest:

sha256:bdb9cfc1d6783a0782270f74568497e14e08306541b3994ef660f3ed0ff9253d

Manifest digest:

sha256:47685fe82d175ea9006c359118fed5a8d5d134ecabfb7c64ee4aee10ec9121db

Size

91.42 MB

Last pushed

8 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/fleetconfig-controller:0-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/fleetconfig-controller:0-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/fleetconfig-controller@sha256:cad69f18c6afca0fb964b2c51cb25008dc1bea3b54e3f467334be49a43544403
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/fleetconfig-controller@sha256:a35d3213b5765a465ad2ebc7057694704faad33242610d9cd1d75ec0e379e2bd
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/fleetconfig-controller@sha256:63a80046d66210badf317f4137105b47e17baaac0acc4b7fc5de628d61c5a5b9
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/fleetconfig-controller@sha256:ee3e944f06e90f0e1b70f97686a5a8f71c1de7e586ac00e4d6b13af72716c440
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/fleetconfig-controller@sha256:80a5c34e2d35d6cabc29ef60fdfa9084c96e77751061ef70bb2b079fe45a8b79
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/fleetconfig-controller@sha256:61be0ebecc739e858f4630553462dff14dbab038791ad0e15751e2f34c4bd296
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/fleetconfig-controller@sha256:bdfbc3a834a0f1cc568e957f45ba614417cfbe2bcdd7afa16b0a61ffbc00c90b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/fleetconfig-controller@sha256:2137e03dfb211969d5d8d425e99117557c11173b6d19f568d79973d0597109d0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/fleetconfig-controller@sha256:952e9dca0cc8e2dc05ca62c13a30a0b9355868b88a1ac402072af8817300b998
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/fleetconfig-controller@sha256:811be7d6728b5cd2df353439fc30e46b50e6740403302826cead28c4a4c4bcac
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/fleetconfig-controller@sha256:d4d1472cbb128bad126e040767d38aed2ee6be2358a4439e004de4f3470cdf81
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/fleetconfig-controller@sha256:331e306da4d50ed54a24bd7f5e7dc933c61aa4d2aa70ed2ab886e9235c67b350
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/fleetconfig-controller@sha256:55fbdaaaffdc503eec5a20af740073871ef486bfffa215c3ea80d72b4721e8fc
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/fleetconfig-controller@sha256:fba301eef18abfebc0b5cd45c37cfd3e1f10a9c45843bd6bce8a5a002e876775
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/fleetconfig-controller@sha256:898fa62de8025a248dd34ab735c1832d677663cada62837b32f395320ed09288
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/fleetconfig-controller@sha256:02c8c641399689af5a30359d1791167fa065fe47cbce4a67d46120d6c6b57c2b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/fleetconfig-controller@sha256:548a2eb05852650896b34744b538eed5aa4ac5f87d0ae2d3a28e7203f8bafe69