dhi.io/metallb-speaker
0-debian-fips, 0-debian13-fips, 0-fips, 0.16-debian-fips, 0.16-debian13-fips, 0.16-fips, 0.16.2-debian-fips, 0.16.2-debian13-fips, 0.16.2-fips
sha256:2331b2612e3868193964c6f4f8ed885c03d306e2fb0969373d521b96605e8848
Manifest digest:sha256:6b43fb2a80d23f93d36fc37242427030883c8c6f0249d360bd3d0d940bf70b5f
Size
39.95 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/metallb-speaker:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/metallb-speaker:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/metallb-speaker@sha256:73ba10711d8d1a4c2356c6fbd9d16bf38cff4dbe50d103ae772f6e6db71a8ffe |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/metallb-speaker@sha256:488eb3eddd95b686a1cc6842263777ff5b607b96459210281b3bcb1f8467b2e1 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/metallb-speaker@sha256:f9fde81fee699b3a7c90e54f4007253ed175a84762cde645ecd3c04ea9b8f046 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/metallb-speaker@sha256:7cf256e8541078f941a7b090762f60a463809a7361d6a873cbc1ae1f95dbdd4c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/metallb-speaker@sha256:68f85d4b8528beac1674fc106933aa32c08788047111b63b6f01064a4c2836ed |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/metallb-speaker@sha256:54f57f63a0b597e19cde73faa1fc8d3def5853f7a2b2ceb055ccc67190bfe04b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/metallb-speaker@sha256:b4c9a9c56e69624ec8d99bd0c03cfb79726485fc35668ec1be7f555f089bcf62 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/metallb-speaker@sha256:cdafee1eef8b4d18645f911b922f7aad1d0f107a52e7d63770f8c777ea26f39a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/metallb-speaker@sha256:05802c93f151434e8b4a6485a5b1dd9d543235550c859b81ef0f27ce923af93b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/metallb-speaker@sha256:c55c1e866c6e3cc3db86efe781e0799cbe089c28b6a0565893d5f5d62e9cf055 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/metallb-speaker@sha256:ec52651c9fd9b0ca91a74aa9799ef702f87280fe6fede72d6c2b89cdfcfce0c0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/metallb-speaker@sha256:73e261eee084dbd5c1326b80c33f65d01fbd401c7c8e307e227bef3327836a6e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/metallb-speaker@sha256:1d7ea0f0125970f3ca6b757c380c207b5a8ea9337da8b8fa61f70f9cfb6bbafe |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/metallb-speaker@sha256:43fa5527eab2b38205d3411be24f7d019a6fb7849e7cd61005aadc4de3426975 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/metallb-speaker@sha256:08c4ed0a0767e34640f883be44a6b529b91f8cd4d445949d7c1addeef1de018a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/metallb-speaker@sha256:bd5de187ff355595aa7d8e500ad7b0f5a9e005b40806e995763759b889ce35fa |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/metallb-speaker@sha256:8b1400989bf67f977c947c56f2dd3dd7b781875c9ed690dff7435cce806dba74 |