dhi.io/netdata-agent-sd
0-alpine-fips, 0-alpine3.24-fips, 0.2-alpine-fips, 0.2-alpine3.24-fips, 0.2.10-alpine-fips, 0.2.10-alpine3.24-fips
sha256:7deec17ab11aae4951faec1823e204784eec1684f4370f62eb0b0f2e77e7b7fd
Manifest digest:sha256:93b53ba90b926473392b8a62be3f66097f5c796e348969ea421f9eeea0ad8128
Size
14.41 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:3518c42218009f84369142dbc7cec443b149c706e2f47bed42e1367b6ce5f940 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:b504174decd08730bab0e090c455044512167d2693547cb33932f9326020e9a3 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:21adbe3ddabaee40d1a133b45828ca59cab23d58ffbd2d181a97595733fb495d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:48f25dc5d39e600de1a3255026a934ab18aca6b12a9c9a70a83a2b7b28cde1f1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:85d27b5db5aa58e71eb84b183a33028e3f57147511c6082b6a1e5871bc3dc867 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:f7431233c14b03c0b1d7c5a0a117b3424d355e3753fa71e9dbc881a7440907f1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:701f86973d62f4c8804a5b53640c60c821cffb35b94cab95da2fc225fc5747dc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:ba7f1a63dea291329b03dee7e8b84ed98aaa3324480399e8bb604bcb5f3a0faf |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:a7b8b14949fd99368a01a47cca0e9e9bf6118c979f18325055cb6edb3b215ea6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:1d140ff9b946f23986a909161c01c7834906ddb5ad6b6285da057b7b9b8667a8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:f13f25a49f782810354a7716fc13382458281bf886baecfd60cdd994d23abbd6 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:ed7639b1a6ca2063c0b38998ceca8ae1aa015d7fc3b48f236ef2edee7b70d416 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:e3ba55af4de8505dc321e65424896d32aa0fcf55cdbcabb13919b43d548166f4 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:87532c11bb90602c00e638bedf1b3c5ed3b1afab308854660766478478f6091f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:b4410b8f753ca2ee33b5ee307a86ecfd065f858948c5415bddd8df9e7e8547d4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:93d14759b530a79a49d9c9a09b7bab7c2a58b9f776e4d0bd8105189920c0eda3 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:005286bdaeb21a825137969363601904014fcae289d1499d758d9bb495be0f27 |