Sign inSign up
Kustomize Controller

dhi.io/fluxcd-kustomize-controller

fluxcd kustomize controller 1.7.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.7-debian-fips, 1.7-debian13-fips, 1.7-fips, 1.7.3-debian-fips, 1.7.3-debian13-fips, 1.7.3-fips

Index digest:

sha256:e4e1f83af57103e13e73c675a4b08fd615c193b1bd9abe6660a7a178187175e7

Manifest digest:

sha256:b783da992f748b872c54d5c1d78eb73b8a5674209ec6af9b169ae232de3195ee

Size

32.09 MB

Last pushed

16 hours ago

Vulnerabilities

0
2
0
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/fluxcd-kustomize-controller:1.7-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/fluxcd-kustomize-controller:1.7-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/fluxcd-kustomize-controller@sha256:0d07deddd3de50389e54b95e5abefff7d0611afda0bd366001eb62a6d45f645a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/fluxcd-kustomize-controller@sha256:09841dbe1f033ffd44ed8ed748fa5086aaf6a9b1259763990bc599648b01b01b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/fluxcd-kustomize-controller@sha256:d42cfede74151fbd4d05df2a6eb4f249a641ab8eca818e03d874a744d2cc1250
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/fluxcd-kustomize-controller@sha256:6656fe841a8f0f62c2048ffc4db096176ff360597ec2860176dbf9e117ea973b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/fluxcd-kustomize-controller@sha256:7599a7f187bdac80000d27a6e689f479c4969ab9c92ff2add198edb314fdd100
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/fluxcd-kustomize-controller@sha256:b81063c73076a11697e8e679634991cd7e36b3bc76eb1c49db66a4cf98b45f8d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/fluxcd-kustomize-controller@sha256:948675f4e7231399243913fa3c7f83295a23887f1e09d865771839b5306dd097
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/fluxcd-kustomize-controller@sha256:e84bfae8bd860148914feff1572c0369dd3851784cd29a0b437f0644b8ea9e2b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/fluxcd-kustomize-controller@sha256:7ffb7acc9d9a59e6c61ad67d2efdc51f5021b525b857da0c680dfa334b664baf
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/fluxcd-kustomize-controller@sha256:5fb8589252af637c33e30d3d824409a8f7f37000d8e89858d0dc61d4d4cd2fae
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/fluxcd-kustomize-controller@sha256:9277c4617a7a01d27ecd640a8aa05170c5263014d01faff35b99ccdb86c21616
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/fluxcd-kustomize-controller@sha256:e2b5f0ffe3ead7bcc188a76e545bcb04092bebbd4bdd0c6dba31ef1bce25bbda
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/fluxcd-kustomize-controller@sha256:80254429c0bcd759a43029bbfe100297d0f78e1aae5c23bdfd712e899fd54641
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/fluxcd-kustomize-controller@sha256:3ec9d9264c835b9a1b3f06612b8cec2277da49eee7a029b9a33bd3cc0c63e177
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/fluxcd-kustomize-controller@sha256:e2dad4de2a91032b7e1d1d312a31481c7a9ff5a48841c42cd30ac15a8236d042
SPDX SBOMhttps://spdx.dev/Documentdhi.io/fluxcd-kustomize-controller@sha256:e920deef8b913fa958ee36a893778787f0224dea11af5cd5ac871d2fd6b1143d