dhi.io/k8ssandra-operator
1.32-debian-fips, 1.32-debian13-fips, 1.32-fips, 1.32.6-debian-fips, 1.32.6-debian13-fips, 1.32.6-fips
sha256:c4cc569f5991dc8152ab68482725a2447d77d933ec4bdf458b4b5e62895123d9
Manifest digest:sha256:3d4b95079d0684cafd7f5e9e01c7c06f1df673fa18f105b02118a58965961da9
Size
22.07 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/k8ssandra-operator:1.32-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/k8ssandra-operator:1.32-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/k8ssandra-operator@sha256:b6d0d79c2afed02f03b1f3c23ccc64b395c39731d880a832202cbfa98ffdbab5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/k8ssandra-operator@sha256:97c5305c61389e09e2a7cf69e45323ecc83dc80891d50e9e19fc06101e04df85 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/k8ssandra-operator@sha256:260f2da3f85b53f93e84230ba8556731c7b0f86b705686ec3beaad34db0c39ee |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/k8ssandra-operator@sha256:b49d1483084e321795878cb951c9ee2774e0f22442198f4aa2222c81c583397b |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/k8ssandra-operator@sha256:4ef009a4b550be6655080c5a03343f5831fb74ec08e1bd2bfe4ce9e9d4d7eb99 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/k8ssandra-operator@sha256:ab1c1fabf841c6a6ba3b219e0873b4aa46442083d67925d298b483d4a51f7cf4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/k8ssandra-operator@sha256:e89b5c3358eee06053970ba735b2848fa18e59f9167beb6a562c8e25f6e0c968 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/k8ssandra-operator@sha256:ac4466991d4bbe705f3d986f813b1ebb3e7de476b053ea268db4170fc1520f72 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/k8ssandra-operator@sha256:25e116d9d8ad9c68c4ad21633c2c9d2da499500c79d2631c1417e3a20f10a912 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/k8ssandra-operator@sha256:246d2545b88a01e8e34f3a165f0343abf19c8eeff5c765024447150bf0dda7ee |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/k8ssandra-operator@sha256:7f7d87f7123d344390927d3f18ae7b879dd4dba2048b779040b7ef15333e9a70 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/k8ssandra-operator@sha256:4093143d3fdab184ba14d996f743591fd3671f4bdfd3e04de238cf4136a350a2 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/k8ssandra-operator@sha256:223b81c9330ff211de4572ebc21a45719543be6b11d5ded77d76cca493ee0603 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/k8ssandra-operator@sha256:a973c7a942399b1c7b6050f49793349365cb3024b9a7d3574d7a62d2e0d159b8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/k8ssandra-operator@sha256:41f84aa33a18b69afb1102d57c3ac8cbf21983e6e1803924bff716a16ff39e23 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/k8ssandra-operator@sha256:1a86bd8e997dd30d1b45fe0d72a72717d57d777ff2d756cfd095fa98094fa806 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/k8ssandra-operator@sha256:5176314a2259cc3828f0bcf08fc493cb2bd6bad478c6ee09b289711f0915f39e |