dhi.io/harbor-exporter
2.13-debian-fips-dev, 2.13-debian13-fips-dev, 2.13-fips-dev, 2.13.6-debian-fips-dev, 2.13.6-debian13-fips-dev, 2.13.6-fips-dev
sha256:9c3e799ba0dd0d69d340e2fd60247487acedde0e7ec0459caa1cdebd065daaf0
Manifest digest:sha256:d4d458a404910e5a28c3669032d247bdd1a74fd0ce8e7ee1141bdd13ad6eeac6
Size
41.14 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-exporter:2.13-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-exporter:2.13-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-exporter@sha256:b57e5fd6890a75e13849dc6cb611abdb437b91c1c87abb91cc327bae8e22c9da |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-exporter@sha256:11b0a262087166add103b2e3ccd440a9b975399c3812fa977794735799b6f2b8 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-exporter@sha256:d9a62876fbe237c927785052956b65e861330b5f6532ac19d28a7f5b71947211 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-exporter@sha256:5a1cfc2ee253c4b891f49f24b77ce05cecb0aec25044ebc78c0f0f982c1ed0fd |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-exporter@sha256:3c5a0547825696a238436e460ffb069b9395cd339a701f96f16bdccbe709b4f4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-exporter@sha256:9397ca70805809f9a1fe9d7693f801ab87c585dd3f8e9e487fbb2097c1ae6ac7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-exporter@sha256:f681c9e1b03b057a9769a4bc5fce9fe6c9ee0f614168bffa3d40194009cfc8b8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-exporter@sha256:8daf78fa87b8aab417dbe015092db24b1a45926089652d41bb9799794904880f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-exporter@sha256:f3d56ccccd39e9f617f6586909d08be94faf433d5280519af2d063f409f31661 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-exporter@sha256:ac9d912bea37e434440e20e71a4d45405b4d5270e9249e60709afb949b59052c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-exporter@sha256:e230c495b1db7034dba3842542adc662ca1a391ce6479003a6f61b25a977f5dc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-exporter@sha256:f386b3bffe39d52e85d39ea2931e8b35b4faabf2375fa5d30d2204132dc31c5f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-exporter@sha256:19e8a85ceddf3dd9dbbefe7c622ffb47a2f7736b979b579c67d6e43400596645 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-exporter@sha256:ed364a196b1838d15de11f214d2e384f150c2dbf9ceb69025fa0628b904f102f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-exporter@sha256:6e95d37c84f03e953c467cd1c1d65181dd419cff39e632275516a1787d9d21c0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-exporter@sha256:a991f8dec5c641e8a4b33d169fe4d3851d7ae225464b48fcd40b99826a4708c6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-exporter@sha256:70a0ed7a92b9b71ce6ba708b77427848f8409b4b516dbce69852307b01552e74 |