dhi.io/netdata-agent-sd
0-alpine-fips-dev, 0-alpine3.24-fips-dev, 0.2-alpine-fips-dev, 0.2-alpine3.24-fips-dev, 0.2.10-alpine-fips-dev, 0.2.10-alpine3.24-fips-dev
sha256:cf772672ee76128a076d9ea9b44a98a229874f70d2781b89813f01a4440299b6
Manifest digest:sha256:5b555d7f09f354d36b0e0ab6a01c8046d786295bda22809dd47abeb581b0968b
Size
16.70 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:ef944b9c7d0311be1db93a75fbdc9bc4ccaba542bab9cacca8c9d62797ecbb21 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:b2f2f7d4183c8310f0d7f61554fcb9b1e9b2439c379913a03c141e52c7dc6571 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:bb084b828f2b2a29d883b8ba19abf79356ce896cc9f1a536a11a9c0b6289a42c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:b91897801b64c52172a51ecd456bd1d9d062d361d8acec36f88d60668c1b9a64 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:889e47915988c4f4dc5e9d077a204ade75c6b4fa00c73ce8f1028210539d4640 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:30f52558c25d475441e719eda6ee55f149a86e4f717186adc550ba5bd41296a9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:c6cfeb34799178e10a2c28fe951b8a26dc958aacd67cc25a58913bee42e8b413 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:b276c6189513de72df2375b5b3689ca82961f61df22b5d9b0b6bef57a0aa72c9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:586e1e6ba34b4d7a480acf0efedad343ce005d25df59c6849294a9e5615f185f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:741c42a63058e789afd1e96d70e445e5313cda41c2c8fd8e055c9c455a40f6f1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:2d3b8d8afff200fdae0c99196443203c4d67eba56bb8a618e6f789ac11db33f2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:3247f787094e378423d5e1d5718df3e136ebcb2cd0d04078c182969f208aca64 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:f17527ed5f42ddc958bb1951ee706f5ad114ffb39c692d6bc3abcc90dd4328a5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:a7ba28e210842978ac5942a1a66402bdc0239d9a3c0e1b7a83720b46cebf1799 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:268a442a211ba0e7ba1f3227212a1fdfb27c74d078a80c64e275932cf7dac77a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:21456d3f995c1e0a0ff022dc79d349a35eeeff45cb93eda2c986268a40335b31 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:2026c6d286a8b658f3f7a55cb04d18e3c306131a40c2d31710b6c738286f364b |