dhi.io/nats
NATS 2.15.x
2, 2-debian, 2-debian13, 2.15, 2.15-debian, 2.15-debian13, 2.15.3, 2.15.3-debian, 2.15.3-debian13
sha256:0f237ab7d76c5e868b8aeaade28c33668f0eb1f31ded3bca59ef44183b6b37f0
Manifest digest:sha256:2f7ffda889e9d6b48a0a959d779fa333c2b67b6f9315c25fb8aab06ba00f3a20
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/nats:22. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/nats:2 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/nats@sha256:4d7a70bd6c64d2af60fe7de17e27e8e2c2382a505ca3afd1de141f1626831b62 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/nats@sha256:a3f43235970e4b85e01850c586155b53f007a2fcdfe3775836eb12661ab51874 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/nats@sha256:8e4060a5690cbee314c82728a01584f5ff9ae4e1e4e62d05dd24dc6628b0d813 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/nats@sha256:76eb04928cb5cfafba9740c639fbca22c50d010f21dde5763dc32f51fdaa9f1b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/nats@sha256:a1a2ec6eec60cd8e5965dc8cb4f96b3e2227058eb5d2f3d95adf7fc0da496d53 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/nats@sha256:7e37814caaf8205b96cd460e5b9a1253c708b77fa022ed0bc5116a1e9c5d25f2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/nats@sha256:3803877c02269b3065cfdde13f4c9e7adcaf5d71d4d8885199cd9f6108244214 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/nats@sha256:dba2e582dd60316ed542028fc7b1f625953648b0d0d74f1083589a007566e7a1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/nats@sha256:c359c1abf6cc599fb9250edfc92ebf7f91ccb25796064de248c8a1bee38d8532 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/nats@sha256:efda4c170c3a509d92be2703457b27f4320574b4d92c84353fd6a6b3619da2fa |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/nats@sha256:811261cfdc8efdad445e7ab0e7605657c999a12f9298aa19df878cdf797bc704 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/nats@sha256:c961ea10d1bea10b72d0c0bd8168da2d68d486bca5eeaa73ec59c8c1dbeb53a8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/nats@sha256:ba2f27fdcba8d1be17aa9a906b6ed511255587948b675f797704e93b08125649 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/nats@sha256:47852b5a0853045c3804726a51db7e56581ee23bcba99474d15f56936b3be4cf |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/nats@sha256:e8b34581e06219be194acb72362acb5e9d47a65f4d391da218c1569663d154a0 |