Sign inSign up
K8s Device Plugin

dhi.io/k8s-device-plugin

K8s Device Plugin 0.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.20-debian-fips, 0.20-debian13-fips, 0.20-fips, 0.20.1-debian-fips, 0.20.1-debian13-fips, 0.20.1-fips

Index digest:

sha256:f96103d0ae2fe3730eec76a42220d5664a81255aff20a6d119893e1d4fd4e00d

Manifest digest:

sha256:2dcf96d01b8e234a283529e3766ed9441df4172adff8a7dfdbaba8fae7b78f92

Size

44.39 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8s-device-plugin:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8s-device-plugin:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8s-device-plugin@sha256:466296ee60040629d13eda81862884902f6fbdf2c0b76eab00efc1fb838d3f30
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8s-device-plugin@sha256:549b6827b6626586f50816cfd13619cf733860c6b514e71f64302a3b7972879d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8s-device-plugin@sha256:a91f4dbcbb02761d0d6009dd40434be7d440e1947bfb0663db21bd31aad9f77d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8s-device-plugin@sha256:0df3f470d6ca3ac93766cbf95d80c0fa5ae412deba61c533b6ab37ae059dec2e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8s-device-plugin@sha256:5ce74cdaa618a78b954866de3542b436b95ea011dd23ad6bc004330a2aa00084
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8s-device-plugin@sha256:4e55023ce64337acb5503ed2bcee581457e0e70fc6ce2aa25015828cc0b888bc
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8s-device-plugin@sha256:cc0e608b034fbfdc2b76dd61d388cbe571dec87b2371b2e9f0657f483b6b27d3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8s-device-plugin@sha256:ca638b3c8e08292a68898323dcff7189ea2175f08bf6141ae64e4936b07e8093
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8s-device-plugin@sha256:156142a7c5bf526fb14521e9dbcef6bd3726b5051412c34e3d95cd9fff8fe12c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8s-device-plugin@sha256:67da274ad8d278d7292f6ddf266c6ba07ff0f07f5aafc3722a99a59b33155ee8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8s-device-plugin@sha256:f2db0ec36126e44d62519b9a17a0d6071db450b27e7bc6666214515edcaf4643
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8s-device-plugin@sha256:1f73af909c6ea304da492e028f3ea24ba2e37ecb64f2af7996c40bd51fd69046
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8s-device-plugin@sha256:41322fef8d3dc3bd0f6c2e5981711ec659b0ff84971b1959b2b1b5fa3660d846
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8s-device-plugin@sha256:1d694c96bbee939f4f4b083df0053939e3c160ea95c2179f139f056127463186
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8s-device-plugin@sha256:96d60bfee898af8439740886dcb2b305c4ff055d4adf759f646feaf0da9b1cec
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8s-device-plugin@sha256:805052ed1038d0115fa24ddaf0453b3eea9ff5dd03d5f2951d339d7277ed7797
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8s-device-plugin@sha256:93bae63cad03d1ee3ca94298b072927528c370e235f59a1fdddd0879acf55bac