Sign inSign up
K8ssandra Operator

dhi.io/k8ssandra-operator

k8ssandra-operator 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.32-debian-fips, 1.32-debian13-fips, 1.32-fips, 1.32.6-debian-fips, 1.32.6-debian13-fips, 1.32.6-fips

Index digest:

sha256:c4cc569f5991dc8152ab68482725a2447d77d933ec4bdf458b4b5e62895123d9

Manifest digest:

sha256:3d4b95079d0684cafd7f5e9e01c7c06f1df673fa18f105b02118a58965961da9

Size

22.07 MB

Last pushed

7 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8ssandra-operator:1.32-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8ssandra-operator:1.32-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8ssandra-operator@sha256:b6d0d79c2afed02f03b1f3c23ccc64b395c39731d880a832202cbfa98ffdbab5
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8ssandra-operator@sha256:97c5305c61389e09e2a7cf69e45323ecc83dc80891d50e9e19fc06101e04df85
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8ssandra-operator@sha256:260f2da3f85b53f93e84230ba8556731c7b0f86b705686ec3beaad34db0c39ee
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8ssandra-operator@sha256:b49d1483084e321795878cb951c9ee2774e0f22442198f4aa2222c81c583397b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8ssandra-operator@sha256:4ef009a4b550be6655080c5a03343f5831fb74ec08e1bd2bfe4ce9e9d4d7eb99
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8ssandra-operator@sha256:ab1c1fabf841c6a6ba3b219e0873b4aa46442083d67925d298b483d4a51f7cf4
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8ssandra-operator@sha256:e89b5c3358eee06053970ba735b2848fa18e59f9167beb6a562c8e25f6e0c968
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8ssandra-operator@sha256:ac4466991d4bbe705f3d986f813b1ebb3e7de476b053ea268db4170fc1520f72
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8ssandra-operator@sha256:25e116d9d8ad9c68c4ad21633c2c9d2da499500c79d2631c1417e3a20f10a912
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8ssandra-operator@sha256:246d2545b88a01e8e34f3a165f0343abf19c8eeff5c765024447150bf0dda7ee
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8ssandra-operator@sha256:7f7d87f7123d344390927d3f18ae7b879dd4dba2048b779040b7ef15333e9a70
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8ssandra-operator@sha256:4093143d3fdab184ba14d996f743591fd3671f4bdfd3e04de238cf4136a350a2
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8ssandra-operator@sha256:223b81c9330ff211de4572ebc21a45719543be6b11d5ded77d76cca493ee0603
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8ssandra-operator@sha256:a973c7a942399b1c7b6050f49793349365cb3024b9a7d3574d7a62d2e0d159b8
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8ssandra-operator@sha256:41f84aa33a18b69afb1102d57c3ac8cbf21983e6e1803924bff716a16ff39e23
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8ssandra-operator@sha256:1a86bd8e997dd30d1b45fe0d72a72717d57d777ff2d756cfd095fa98094fa806
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8ssandra-operator@sha256:5176314a2259cc3828f0bcf08fc493cb2bd6bad478c6ee09b289711f0915f39e