Sign inSign up
MariaDB

dhi.io/mariadb

MariaDB Server 11.4.x

CIS
linux/amd64
debian 13
Tags:

11.4, 11.4-debian, 11.4-debian13, 11.4.13, 11.4.13-debian, 11.4.13-debian13

Index digest:

sha256:1dda8d8164e9bf44cf723441f908a6603605dc027b52961ba90ff3cb33b93c12

Manifest digest:

sha256:460d4bfcfffc68ab5bbaf5f6fb9c300e5b48dd9cdcb9cbbe01668a3db212b67e

Size

69.57 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active until May 2029

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mariadb:11.4

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mariadb:11.4 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mariadb@sha256:b408a05b06b0a76c44b636f9ce83539412a1c30a9ae6df4a950c9e7a3d44f329
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mariadb@sha256:230dd475ce0440b42b07e690ec3f5ac475e776aef18fba1192137a97aa8ce902
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mariadb@sha256:c570670bb84528801103f02864ceed7ac32b48c4f8686178fe3052e8fdd2177d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mariadb@sha256:d74b816ebd552685c16eedbf8d56420cb8e02e5a0d88e037976ac85ca81988bf
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mariadb@sha256:6e3c932b8be07b5ba6665c10373734f1e101e002c39f83ca9c0ca626fd8cb483
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mariadb@sha256:40d032b18e5e3212538ee761e31ed054816e3a0b6275df11f1798c7cd8fd0de3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mariadb@sha256:75b8060af837cad7f1a33a30d7c62a74c864a218de0c875cb00faff2ed4b4398
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mariadb@sha256:5c27744c16dfcad05dd5769d5288b1b89cae810304d9818bdd66abf206ee64b0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mariadb@sha256:058b29eb384f86e31cffe5cb250ccd7abd2b931fa59a71ca3816b1d856c0a429
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mariadb@sha256:c851b1f1c1b4d9ec594e645ffc979c722fdfa19f0bc53acf01e4c4fa5aef9254
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mariadb@sha256:1b5f79457f1fc3143a72b881e0553eb493cef4ef78f80c7ca75da859819a79dc
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mariadb@sha256:7f92e637a5c1b783081a9f378a7a5914bb2015f79e53dae582e5cd3c624ca766
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mariadb@sha256:04c8e90c80367f29b39c6dc98175c749654a2c24c541bf0ea3b63e6cc3edf549
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mariadb@sha256:71f9c802d04953183bc960b09d699ff9a06c0727b7383a874ca3adc814d2f6a3
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mariadb@sha256:addf1a1594bafc288bb3a5bb71f22541437c2c72c166cdb208b1aa89eb78ddbb