Sign inSign up
Mongo Express

dhi.io/mongo-express

mongo-express 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.0-debian-fips-dev, 1.0-debian13-fips-dev, 1.0-fips-dev, 1.0.2-debian-fips-dev, 1.0.2-debian13-fips-dev, 1.0.2-fips-dev

Index digest:

sha256:16c2883d33b60ea684d0cc1c073545af64e5dfa3a19b449821e95a19d589c252

Manifest digest:

sha256:9d33f15ebb96c153372eeb72199001e295c1407deb054b4139b08fc87ec7b040

Size

63.08 MB

Last pushed

6 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mongo-express:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mongo-express:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mongo-express@sha256:fd716601ff99cd706bb07011bad726ed7db22d31afca93cfe780f6040fb2398c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mongo-express@sha256:3548978fb4a179338564942fa739045fc15705a3d3a86b3230c058c67a558264
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mongo-express@sha256:078b5acc4f30ca23fd79e05d40a7b1912051dd05d0905334eec7a04dd504797a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mongo-express@sha256:dac33a619dc1857342c26e2ad9ad4d4f147fc2e473cdc2c5e34dc457229d4f89
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mongo-express@sha256:de7fdce7291d83fc50e7e27b5918b7969e27fb524da68e9b52fb16367d83cacc
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mongo-express@sha256:86ec80dd3646cbddb052d4d7ca3c6adb531e227638830d93a1a7244d39d3a24e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mongo-express@sha256:a830d8b47a4a3cadb42747152acf8a9f13803f2ad647e5ffe6db9c8a2fab6ea4
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mongo-express@sha256:4aa5faf1c61ee3594743fddabe898ad375c7914363edfd9be5f9b16968710d8c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mongo-express@sha256:a31d83f25c912e0b49b864789565818bd35f9ac51f52728692e3647db6f13a81
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mongo-express@sha256:dffd7728c1c9e4ebb5ad2ccd93399c3675851eb6830c473f2491e9fb33c6f593
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mongo-express@sha256:3292dde3b864a95a6d031db8776077e4471ecb526886ec6968e4bd57dff727a3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mongo-express@sha256:7a6ec3b2fccef60dbe9fdda389ed623f465a08206418312436046764daaa5f40
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mongo-express@sha256:b94214c845983fc750eedffba906968d74b3b32c0ddf2675f3bbe0c502f48a3f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mongo-express@sha256:4ad6c63df8d6dbaf9d306f0c5a9bab65c8448c7f02ecda7b54d4bb98dd0ccc63
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mongo-express@sha256:fee34e37702b0fe4a58b43f00235dadca2de92332b3cbd8a1d3704831915253c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mongo-express@sha256:4549674da637eaae2e8b2c79819716e4abe049acc2fba0c153f9a30ad4e88f99
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mongo-express@sha256:5497bcf79822aadab6e60e55e7fa65e17b4cb57afbc0c0e531a78433484419a0