dhi.io/forklift-controller
2-alpine-fips, 2-alpine3.24-fips, 2.12-alpine-fips, 2.12-alpine3.24-fips, 2.12.10-alpine-fips, 2.12.10-alpine3.24-fips
sha256:35718d4ab5ec261f140aa93902e0ceebe0499e8c7987a8be6f6d94fa63e21c7b
Manifest digest:sha256:4a62a103dc0722a0adefebcbab078d0e6da217e9cd69c4be3ccc9ff2f252d23d
Size
31.71 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-controller:2-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-controller:2-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-controller@sha256:a70693f44050378db39cff8ccabeab0195ec3b32f6a1a756c110bdcdfb4941dc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-controller@sha256:9496bad5ec73198361597cb77a3957d29593b7db3342ae63bbeb0b80a686a9f8 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/forklift-controller@sha256:63cd6ce1d30c01ddb79a08e060e09fac092c2d674cf9281adeb9a530820d7e17 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-controller@sha256:386856f9d53dbaed6250bb1fe2e78b4d1dfc26eb947f28fe600d3c921543d5be |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/forklift-controller@sha256:d595245cf48860713faaeed5b936c20f76860cd96a13f2352405d5785c23287b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-controller@sha256:a8369f69e1f9ce63c523e0561b9f8c1f6213fdd0e96660cf31408f48d500127f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-controller@sha256:2d9f35dae40644c6b95035f1af7a1fba94a717ea8f60ab0f13898a44a2980e38 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-controller@sha256:36ceca9a3df6cd4745f0e6b38e7e7ebba1620644dac3d69c356efa1524fdb2d0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-controller@sha256:8f91f428f2b1ce6e72025e4f1ee13712b14c0e6a0b47ff47414243b2c2a3f559 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-controller@sha256:206cbde86a68aeaae1527feb160a577909d8003956a44e5790088f273861324f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-controller@sha256:b7fcb3a1545054d7f01d94c6965ce8fca8ef088503ba7429052bc65b4f7be37b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-controller@sha256:4507f08ccb40c7eda6bda78deb1648545b2dfb23952fb82cee50cbe8dab59d3d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-controller@sha256:5149c76c0ddc27339f1d349399f1e962fee1ba78d4d4bc5bcad0b7a4470fceca |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-controller@sha256:064b0a5943a13dc5805f24036702549b9874d7be50d63f23d9a997e9d334f09f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-controller@sha256:160bc4058d877bd16c45e73ed57df4f4f2e00b419e22c2e0cee8367690dfe33c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-controller@sha256:a7f6e97fcb28b9ba606b5c54820cb68098e2290fa2fe4b6f3b54edd99bf6295d |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-controller@sha256:12d5bdc4f8a0329cc751c7892d633ce8b59411cdc560eae1076f921fa1e97f69 |