dhi.io/forklift-console-plugin
2-debian-fips, 2-debian13-fips, 2-fips, 2.12-debian-fips, 2.12-debian13-fips, 2.12-fips, 2.12.11-debian-fips, 2.12.11-debian13-fips, 2.12.11-fips
sha256:bf328b0b2cfcfeba47f8c6d754951de92ce6a512c904355f8c41a2ec9134a37f
Manifest digest:sha256:c6aa54535e4d8542d0865fa4f22837ff468a12508d4ef803bf52783eb8eff495
Size
15.84 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-console-plugin:2-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-console-plugin:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-console-plugin@sha256:44a3e8ab600c8346d9439b60c678f6efa291bb360e76da18c55af832890f5c2d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-console-plugin@sha256:fc81f4d60a350ee65995f896be1da9673483e1e7b76a8f5fe4e7a6cf20293e14 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/forklift-console-plugin@sha256:411f89ef14af50047f4f753c327f05deda2ead81d161c23076cd1319e535fb74 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-console-plugin@sha256:767978466eaaab8457705a9749a3542124894a3762e69df8bc91a2d389607393 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/forklift-console-plugin@sha256:3bb377ac868b68cc6d2fcb6fb3f6c82f5e41d452d73759172af4c35b228456f7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-console-plugin@sha256:4544315563ccea79a72e78a7309897c868a5ebf695344b849f6e22e1d43e6448 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-console-plugin@sha256:3f21a0286aa4ed79e94c7401ea646f8698bb90be9b27f832ca8ee07f3196f2ca |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-console-plugin@sha256:3626374870dc497746840e3476a7e30c33d1b553b0fda5299c1d771ae7dcc7e3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-console-plugin@sha256:83eb9dbc78bbe2b4df85f51f7feba3231814e49a36256be66f1c0f342f72acd4 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-console-plugin@sha256:4e97a508af3c5813f7203a9ec5eb311c5ee8c1604accd30810f5a170bb50faa6 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-console-plugin@sha256:21ecaaa7989bc03343d64ed76f537b61be5a4fc7ac5283990bd83f6651b0f2c3 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-console-plugin@sha256:c7459fabd4cfe6532e4ff9956c38a12608fcec3613699984719aa23faa91f19d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-console-plugin@sha256:5e1e9fadd1375a49d178fd37a22b047d18928eadf0dbcce2e32edfd21557659e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-console-plugin@sha256:604a0c99699629ca2f06696dc16d10a51aa9573a51d93899a4c78f06d844cbd5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-console-plugin@sha256:393e242a96a6354ee624d69eb15455481ebaa8fcf12ed2937024bd31ca2839e0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-console-plugin@sha256:f4e990fba2dcd041bdb833b5fd9a883f69691ed7ab63b6076dd03c593e8997c7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-console-plugin@sha256:c29da3babea4b48285c7abb26b8e76e77bd32998316ac89fff5b34acbd5995a9 |