dhi.io/harbor-exporter
2.14-debian-fips-dev, 2.14-debian13-fips-dev, 2.14-fips-dev, 2.14.6-debian-fips-dev, 2.14.6-debian13-fips-dev, 2.14.6-fips-dev
sha256:791bdcb3b880cfc4dcf45bcd4083c40909969096f4f868cf4cf89d97306be7cb
Manifest digest:sha256:bbffb9a42d739f86e8fd4bd3b1008993ce7970e66fc9d63ae756cce973323e98
Size
41.19 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-exporter:2.14-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-exporter:2.14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-exporter@sha256:b434b3167024996be2a2bd4ec345068553b2c98a9eb60dd0419e348959fe738a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-exporter@sha256:3bff4ae2ca6c3246dbf78ad7178e5cc7e0629838fb75881b530d558e28b0d5b2 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-exporter@sha256:7b5c7441b376cd2b1eefb3426f2d4661adf1c2e0ff6662fea25b7ff020e26c04 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-exporter@sha256:cc0cdd85d2cb94fd754682320fc179bcaebd2ac630fd3cb68f51cee65f530ef4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-exporter@sha256:0ca885a8281381b9c9adc012301361fa24051580b613d106cf567589f92febe5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-exporter@sha256:205c5953a51550f3f3136c76f1e9fbe1e23562c3036b680cebed4d5a2a9a94a5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-exporter@sha256:a96db151a0e062c748497a4aa27c3d1efaec0f2402684c327d297be7b96c950b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-exporter@sha256:dcff544fd7b2cf791fa0b319de3066fdb4b9d7455194a9c7072b6da469658cb3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-exporter@sha256:9e802febda45fcaae2aa46756c34e92f3bf55ccb16d4b8a83a83852959732f42 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-exporter@sha256:4ac4946f5b557017709e959a0e83d771b12ff87af292feaf9c9b60ee0444c632 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-exporter@sha256:fa83ab1e25871cb8b5431c75c53611f40db62b9ecd0c92a95ad4619ca2016c46 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-exporter@sha256:6f584559d95646601214e07781d4b1447b0bd0fe32cae5f34abd1c18ff73bd5a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-exporter@sha256:6cc8eda6d7ac6ce6d8994d430e616951620f631533b1811af6cc10c1074b012a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-exporter@sha256:b475b78e68a2d48f0e3776f2a7d539083769cdc7d09be4845ac3cfadf61fd29a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-exporter@sha256:3eeb2ba5c9396c9095eb3c40095c37eaaf5a12f423b9223b720adcaba9e388a0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-exporter@sha256:b0632561b1f057e181cdfa2670c0c8a97e2a124bf46a755c25dd19bc8593c748 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-exporter@sha256:761579596c3258862119ae8d053a3ca1cfc4a9d566605df8dc9d2cb91665f54c |