Sign inSign up
Kubescape CLI

dhi.io/kubescape-cli

Kubescape CLI 3.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.0-debian-fips-dev, 3.0-debian13-fips-dev, 3.0-fips-dev, 3.0.48-debian-fips-dev, 3.0.48-debian13-fips-dev, 3.0.48-fips-dev

Index digest:

sha256:b10a73199d219e3856454113f036bf6faf3e5fa962dc3eb82d31f7c05de119d5

Manifest digest:

sha256:e8d81e80d6608b983db5e65d3f90308d09efb013ec43ac97573f4be61a3afebd

Size

117.61 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
0
1
8

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kubescape-cli:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kubescape-cli:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kubescape-cli@sha256:26d78b651f170be97c54ab5c7941539c9d3edb379ea804a25f47e68a9b276cfd
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kubescape-cli@sha256:9af6904d70967de4c1093ce5c9187419f0890df883b6199ea51f51e6b6e90b26
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kubescape-cli@sha256:1f654e14fea062f223960c2981e769347ed155b789fc6fdf4ab86bbc1809e9bc
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kubescape-cli@sha256:0dad8df9aed7f730f6032f3495aff4b7dab4b8d5879140f39feebbd60e3adb3c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kubescape-cli@sha256:86b88695e1d158ecd972b39b6e7eaa584e06b6592aab54656056b9aa69f43ff8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kubescape-cli@sha256:c6ea49e11773731c81eeeae08390aa6b2f3aa7fc28edf402c33d2ba60bd0a404
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kubescape-cli@sha256:f768e9772ffa1983f2322878970cf1158a17cd53b3736943a6dac9d8ea433a19
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kubescape-cli@sha256:f69f18e925734045d58141f35c09532fffabf2a91e7a2299093375b94602da78
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kubescape-cli@sha256:247211affd1d249a6b8b06eaceee29560f59a877ddc37f24bdfd517a928b200d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kubescape-cli@sha256:bf38eed5920b0c596ff064c15952786904d5b5c82e631799614f3c2e97cee913
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kubescape-cli@sha256:78a5631be899677130e61e4bdc013890b104678bd6ee02cbbba0531e9703ca22
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kubescape-cli@sha256:5d605d742f5d2a6dba273c49987f93bc93a64ab89148b798270934d1f5533a56
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kubescape-cli@sha256:530b0500f9715daf0e03461574f9cdbadd103086e17097f4f18f3dc4feb775f8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kubescape-cli@sha256:0b1810da799a95396d2f0f099566a9fc463fd55c5d4df45d041b5335c242f0d2
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kubescape-cli@sha256:6bffb5779f0beb66be62570b83951f503d884fb78df535706b1242533fd5f581
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kubescape-cli@sha256:741ecb9c13022432e1e014e7b414768aa86baa36795f34bc1180f0021a2e9b67
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kubescape-cli@sha256:d1fa154419238bf29e57e2e2f0f593bea5808dd155d96b2fe749bb6198698e3d