dhi.io/netdata-agent-sd
0-alpine-fips-dev, 0-alpine3.24-fips-dev, 0.2-alpine-fips-dev, 0.2-alpine3.24-fips-dev, 0.2.10-alpine-fips-dev, 0.2.10-alpine3.24-fips-dev
sha256:7a74856d4987af8c94bc40e0ccbb13cf02ef68e60ce6476636c97806be4668d3
Manifest digest:sha256:1a59658053743bb4758ee7f1252bdd6ba22cba2bb0bd575efcdf7f95fa5cc89d
Size
16.70 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:f88a5d7bc7110b3b513884b4a42a8c731ecc464520ec30bcb06c0f42a4cc12b3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:bddf1c7f44224a37f5ce94e839b46d1ace1083f74353bde5146bf3aeb359b3c1 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:d736f63de894fa3e3720692d8d91ba927f6d63d7a566cb11cfabeb8802ef74b9 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:992cbc37721d5815c5cde0a674848487f25e8594acc05ab4647c1fae013d6351 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:9302896997f34cfc6a3fbcb4c22be15ea8390671947268f38fa8f8d0aaddf559 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:864f4a0da2af938820a19006ec11ef10bcd4b2bc84dd73859588329a75a58297 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:045bc70a331dda20e29dd98d09e90f285c45285571f2ec5916b3e95ee26fbdad |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:2dcb27ad1d55be63ef13089e84a67162268e9ee940260ef4f08d7b666653d73d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:7795795fa3562026839d6451d49accda3228d0de9fd062e07ab09ed55598e141 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:7d716c6acb6eae3babdeb40c8959bf876e0f1bb1c8e083761d9c898bff3672f4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:7072c53d160d48c2dfc451dae07c45cc34da1704e2b78d4b1c8d74948860e75d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:eed6d1e37920a2368862f13744e622725795b7b6eb2c2c800c77865f41c769bd |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:7720798f7dbe98de38b927b1e9c47b5ee401a5aeaf489f06c21f237ade9917f2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:9a170f5d826c0580a5a498e4606090381cfb53026ea4fa9d7d37c59ec5650965 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:d8b2d750a9b1ab2890bd7fd8d27ed1d18b1fea56533ce43431f853fab82c6f9b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:30410e91faf12595a6c0383cbaa618d63057fa68dc27edb14197af2e683c86f0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:e2b326c7349b6d05de494d82da24ab109dee495bb7b36ea3fd587a2dc2cb7172 |