dhi.io/forklift-ova-proxy
2-alpine-fips, 2-alpine3.24-fips, 2.12-alpine-fips, 2.12-alpine3.24-fips, 2.12.10-alpine-fips, 2.12.10-alpine3.24-fips
sha256:118b5a079982afa2ffcb0f09f448c776ffb86f4f1fdedfc93e87bafa5ba63974
Manifest digest:sha256:9d4f39a5c27b491c74873f793009cc39deb0cfca38110d74ea3b6598df1df409
Size
15.33 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-ova-proxy:2-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-ova-proxy:2-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-ova-proxy@sha256:85834762a7e094260182c4a1bf18ff00169e1af64d0d519d11519836151c51a3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-ova-proxy@sha256:40ab7e87c755a25ee1a610a397e5bcb2765e9e2014d3c6763e4856ef95b0aa1d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/forklift-ova-proxy@sha256:8aad66ffe489ef6b90119a57ac417668f81f879c7df552770bdbc767fe4e205d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-ova-proxy@sha256:7ba5875ed42eb0526823496c3476f53af60741d706496db55ea7b62431ba4e87 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/forklift-ova-proxy@sha256:d28635c580b5137b192b959f1ac241dbd9cc95e76936ffb62de20ba1f54f7437 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-ova-proxy@sha256:a5e16bba523f405965965fa1a60affb50a49c25fd0770390948f6bcc58291659 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-ova-proxy@sha256:49d439da24d0b677a13df03a4f2ceb29289aaf5f3bb4163e76e9639a5bf81ada |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-ova-proxy@sha256:e014a723060c4c3c8ecfacc8c9680e33c49dbd291978347a2d8ded32a0758c96 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-ova-proxy@sha256:5f440af5679dd2446a7ab5b7a5d20e5e5ee34b339221ecb64ccfaa1fa9a7abd7 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-ova-proxy@sha256:368355673dd1d543751b191cb65709d823393208bb2d845d0b30e05f09106d00 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-ova-proxy@sha256:a5185abb55ea76fdb6d93a7f6f54a6acb12ce885715e9cdfae08ed9f8589642a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-ova-proxy@sha256:d494292bf46aaa4f0080d270906e43161964f2e88b9f86e667d1f9de0d4f5776 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-ova-proxy@sha256:60908c54fce3a164f886b6b4e56a22b838bd19a5f93d0bd7f87087a798d02f2e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-ova-proxy@sha256:c4b41a5cc337865ed59341782a6bf7c49cd4c48714ad6808d54fdb5bbe22beec |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-ova-proxy@sha256:a4a8017e70446255a9b10fb820862263b4fd999eb251c24e2e18d884685266ff |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-ova-proxy@sha256:2b50fef5ba1e86d9e6a421b50303c624dfe7aee77e21485b9d06f83f1e2d80bb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-ova-proxy@sha256:aa7f6b67b0e1248fb1b93e0f38915e588c5226c0dbbd59287640962e12f368cc |