dhi.io/gitlab-runner-helper
GitLab Runner Helper 18.x (fips)
18-debian-fips, 18-debian13-fips, 18-fips, 18.11-debian-fips, 18.11-debian13-fips, 18.11-fips, 18.11.4-debian-fips, 18.11.4-debian13-fips, 18.11.4-fips
sha256:9973e7400c2ec099e7c83084fac92226849cbc7e2fa594b9c5da99bb9f4308ab
Manifest digest:sha256:7526ea9386071983b4f467fe01c65c99ea3d6354e96147b4689b1759ff026081
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/gitlab-runner-helper:18-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/gitlab-runner-helper:18-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/gitlab-runner-helper@sha256:81f92e04da8c3bd3a14955911c17a9caf395461318af266d8accc46ef7382cd7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/gitlab-runner-helper@sha256:d16489324e8f0ff0bfb8dc3a9ee44bf9ca550ec9a436542df1b48994660ab02d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/gitlab-runner-helper@sha256:23b9ceae3bdf9f62d54538c5ea2cfc3272f912f43d60050146bceb816b257ebc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/gitlab-runner-helper@sha256:707e41b36ab959b217d59698cea32b61552e25a15ee42dc358c4a2f26ce09443 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/gitlab-runner-helper@sha256:7a82b1dd2a3c0bc289e3a460b64d06969089f467c83216571cbc5fb405bc2797 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/gitlab-runner-helper@sha256:60340b75ae39af48d40af98913d9179dc9460fefb674cb76c5df8ee9b0d06347 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/gitlab-runner-helper@sha256:8186c0ffb31cadabd425865168d28adc11b6322b93246ee041bb5cd4a02397de |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/gitlab-runner-helper@sha256:e5503849eabc7a1113ef8a37cb31494024cb353686ca277ef53d6c599c3942a8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/gitlab-runner-helper@sha256:b21fbec942cf2497f60f55bc89885ac8b1138d46d5c410627e1b74ffe01a43d7 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/gitlab-runner-helper@sha256:f5e6bf106a7216dfffedc0aaeebb68390130a586e7baf619d376ab372985f16e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/gitlab-runner-helper@sha256:3bb645163f454b83e5d0b7f260d207526da68348cd99fc414b4cf540397b0afe |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/gitlab-runner-helper@sha256:0029153a17f478ec75147e64748bac31638c7f4eb6a942721d7afecb1c525176 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/gitlab-runner-helper@sha256:bfad045b81f938423bfd374d2e401d06b7b4bfbb8aa0a1015270a0844d9c6340 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/gitlab-runner-helper@sha256:1adc4f558af31bf5028921010efeb5a728f58a375994433d9d75ee9814c08002 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/gitlab-runner-helper@sha256:9c39252546cb146f17ff2464d5558d8adf642a9e904288a5f37128026a671872 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/gitlab-runner-helper@sha256:e5547bce088c1099212dace62f8e68e0efcc30d5fda224a6b603ae4ae88ef68e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/gitlab-runner-helper@sha256:0659f861e2ef973e9d42df7770c69e96fc788beba225b2fd10663aa0e54bf38b |