dhi.io/k8s-device-plugin
0-debian-fips, 0-debian13-fips, 0-fips, 0.20-debian-fips, 0.20-debian13-fips, 0.20-fips, 0.20.1-debian-fips, 0.20.1-debian13-fips, 0.20.1-fips
sha256:f96103d0ae2fe3730eec76a42220d5664a81255aff20a6d119893e1d4fd4e00d
Manifest digest:sha256:2dcf96d01b8e234a283529e3766ed9441df4172adff8a7dfdbaba8fae7b78f92
Size
44.39 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/k8s-device-plugin:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/k8s-device-plugin:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/k8s-device-plugin@sha256:466296ee60040629d13eda81862884902f6fbdf2c0b76eab00efc1fb838d3f30 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/k8s-device-plugin@sha256:549b6827b6626586f50816cfd13619cf733860c6b514e71f64302a3b7972879d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/k8s-device-plugin@sha256:a91f4dbcbb02761d0d6009dd40434be7d440e1947bfb0663db21bd31aad9f77d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/k8s-device-plugin@sha256:0df3f470d6ca3ac93766cbf95d80c0fa5ae412deba61c533b6ab37ae059dec2e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/k8s-device-plugin@sha256:5ce74cdaa618a78b954866de3542b436b95ea011dd23ad6bc004330a2aa00084 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/k8s-device-plugin@sha256:4e55023ce64337acb5503ed2bcee581457e0e70fc6ce2aa25015828cc0b888bc |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/k8s-device-plugin@sha256:cc0e608b034fbfdc2b76dd61d388cbe571dec87b2371b2e9f0657f483b6b27d3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/k8s-device-plugin@sha256:ca638b3c8e08292a68898323dcff7189ea2175f08bf6141ae64e4936b07e8093 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/k8s-device-plugin@sha256:156142a7c5bf526fb14521e9dbcef6bd3726b5051412c34e3d95cd9fff8fe12c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/k8s-device-plugin@sha256:67da274ad8d278d7292f6ddf266c6ba07ff0f07f5aafc3722a99a59b33155ee8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/k8s-device-plugin@sha256:f2db0ec36126e44d62519b9a17a0d6071db450b27e7bc6666214515edcaf4643 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/k8s-device-plugin@sha256:1f73af909c6ea304da492e028f3ea24ba2e37ecb64f2af7996c40bd51fd69046 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/k8s-device-plugin@sha256:41322fef8d3dc3bd0f6c2e5981711ec659b0ff84971b1959b2b1b5fa3660d846 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/k8s-device-plugin@sha256:1d694c96bbee939f4f4b083df0053939e3c160ea95c2179f139f056127463186 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/k8s-device-plugin@sha256:96d60bfee898af8439740886dcb2b305c4ff055d4adf759f646feaf0da9b1cec |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/k8s-device-plugin@sha256:805052ed1038d0115fa24ddaf0453b3eea9ff5dd03d5f2951d339d7277ed7797 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/k8s-device-plugin@sha256:93bae63cad03d1ee3ca94298b072927528c370e235f59a1fdddd0879acf55bac |