dhi.io/mongodb-kubernetes
1-debian-fips, 1-debian13-fips, 1-fips, 1.12-debian-fips, 1.12-debian13-fips, 1.12-fips, 1.12.0-debian-fips, 1.12.0-debian13-fips, 1.12.0-fips
sha256:4994e05b57afdf21522835ec43e0efa4daabf2bb08d5d78c50dec0e1ffb6215e
Manifest digest:sha256:aaadac778cced1ad15ba64469599498f8cad2617a0eccd55adcf08f9248f1598
Size
26.31 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/mongodb-kubernetes:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/mongodb-kubernetes:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/mongodb-kubernetes@sha256:c6d558ab0f2b3d7eea3d72bac500ebf8a4ff12a91cd283bc7a191fb4b45a942b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/mongodb-kubernetes@sha256:21d84932014dbb55ff83f29c98697088a5c77c1ddc2ef74cd9f75d455f3d0108 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/mongodb-kubernetes@sha256:0bc93db7d0865498fde8898c4b0ff03c75b897e7512c13c103277c5325d4b4f8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/mongodb-kubernetes@sha256:46a7e366dbc8365e5a87c376fd344b5f81a610ef8bd4eb213787b357cb6a95f5 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/mongodb-kubernetes@sha256:6a640b3fcb1495718616e0828f50a6fb35c2ba9158bfbb1ee39952bed130d84e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/mongodb-kubernetes@sha256:94813ba3110d695ba00ac646c82dc3ea0223f67440caefb1f5c7235810743b71 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/mongodb-kubernetes@sha256:374314c3a20f06982c7e934c542a93ad72a0d7bc1ac1f5777d1a608bd7475e49 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/mongodb-kubernetes@sha256:267f7fe336dad7667b63329ec1a3dd84f37df4c4aceb72ce9f2468e6a101dde3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/mongodb-kubernetes@sha256:e8bffdb1cbe781d9ace8af4bc5235bb4e1d57920280a04fd20976a173baf2178 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/mongodb-kubernetes@sha256:b99e72b7cad6b8ab5eaf333aafe7d12dbfae2c5d491d02f18d574b44880b593f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/mongodb-kubernetes@sha256:645b457bba7b96a66d24682ad65c944eb436268c395cc6ef3343c196a1c5941e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/mongodb-kubernetes@sha256:5665e93dc53c91a0e163c97185cb7552560dda3dfa1fda419b774f03e006c0db |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/mongodb-kubernetes@sha256:c838f253695a4b140a0cb9d58b0fc8e2bc5f2ade5ffb2389ac6e450b8bfefcf0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/mongodb-kubernetes@sha256:0d6af6bbc120c46c319ef0734d13c803c65026568f72ca918860a8ee90c798a5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/mongodb-kubernetes@sha256:d61f9cfd036c74db180e65874a14493b760c37b63d775b02e3d8048483eaf716 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/mongodb-kubernetes@sha256:f9f82e77f7a91675d40b2071f6b9453fe5e77ab49f857b377b77986ec52c2ee2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/mongodb-kubernetes@sha256:670e67bcbf7c3c510fb2d493689a3dc057175c0bd73f19054c65d9490f0022d9 |