dhi.io/netdata-agent-sd
0-alpine-fips-dev, 0-alpine3.24-fips-dev, 0.2-alpine-fips-dev, 0.2-alpine3.24-fips-dev, 0.2.10-alpine-fips-dev, 0.2.10-alpine3.24-fips-dev
sha256:1961d675998ef2908e3da6f461a7af22567e5bb12300db3cfa81b8a4e1ad350d
Manifest digest:sha256:7719838c81c2e67e2b2b7931541d414297fbe34cb5456508e1601edd21bb797c
Size
16.70 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:0cb17e6143e65c8f45d3048d3bb17e75d4e0dcbe296f32b9a8eeb2c9ccba3081 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:25ea81681c5944db81998728197151203f3ede275bc72f3cfabfaab710ee4bdc |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:8854cbc8ddd1016d44165330ca0148e54c41ed66a3d25656c6e57d6fa768c093 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:eea9085ac5f95d2649be613b4adc149aff09f79c8f00a3a4ebc8da0990a514cf |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:bc9921b0d75274f282bb6502b92d4d8fad3be148a5a61b7fc1bb86887931dc73 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:2111dae6195d6f8d115f1a8cee661902d634f5f4b31b939ce14d7112ec5a429b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:36a3e2b68967add4b3ecb66846eda190a0840946ad8db7fa9339f57409cadeba |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:1402955d9a722b426a9bfc6a3cc973dcb0fb13c535b6f90415f4877849b5f0f4 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:e25b9ff8c3980fa5028aa8bfa86915a4b3d76c3133be336f1cc3b8fbe68ad2ec |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:10c12f7f78f94dc18982cc2bfb7c0deddb61272c27fed045446b4c118bb27150 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:4756736cc9164ca4d82d7fb99423bc378fd89f7643218f6ff9666d4c239a1516 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:790c3210093da61653d48d1d672bbad13cd954bd4947bdbac4b0ee5b2b6ed867 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:ef5b13dc0a5d6e8c5f02afe9b5616099515fbe3c08cb7fa357c3da85ebb8f132 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:8de27f59d4d90d3fc27bf08004ad5c4fe1bcb75a2326d2cd88b78ecea49818f6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:c49c11444c97900bb90a354d6f14806261c66aeb53391b58692815e8ff90f5d8 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:e4ccef55ca4f4ff883b0ddd5640a03d777f208fd8c11d2e87054053733d1d700 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:4536223740ed66fccf9c11bb7e6a673a5bd7a25b628638be6c154d3be6519d9e |