dhi.io/netdata-agent-sd
0-debian-fips, 0-debian13-fips, 0-fips, 0.2-debian-fips, 0.2-debian13-fips, 0.2-fips, 0.2.10-debian-fips, 0.2.10-debian13-fips, 0.2.10-fips
sha256:a470f8cd8f60132ccea3242c9994d9ab802a8a639e11af416c91a3af3f7fe219
Manifest digest:sha256:06ace1639596fa1fc457e51e980e4653ee4060039c0c54e9bae08392fb377d28
Size
19.48 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:44ce746a43a2ba77475743fe8713592b02b0ca9ec26d32057ae2712495383800 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:d1e4bf948f14a0b4d3fdc98ec1f458c635c4d625dda50b8b8480cb478e6a1b06 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:8727c37428d32714b4aa2fd097447c96fa8ce1380b032a37024d8401852cbaad |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:c60e95a98f49dd117f0a2f4a4e3d1ec7409b80050944fbbf7662a3166e007711 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:959ee4ea512b8831c66e888cc72147c898e7fc01909459387651dee645cb659d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:c3b7ef6b4d1e795b0c57ec032d0410e30bf7d988530532135ce8e191e04887ed |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:f4d1d8bc7e61a3f359187a3b86e92c2b98ef568e07355f6ca09306896edd4fe3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:2f6c08696012e786264bb16998f5ec895a6a410a969e297baf2f61b15d55dfda |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:1ecaa52136d382377e7364174d83d1a4dc78edb95d5554d44d9148deeb4e9cf5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:78180cbbb43088a9708bc5e069aa6a1ee2bd8c5f90827513eac9c3abc4f7bf58 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:b0bc5076e71984b09ca14c983794cbc1c44b1a1003e57be1ec84043e288b551e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:9082168ea0d8bb1632cba172be233ed6e9c7dd716057a613cd7a6b6334d8d815 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:5686b8e86b18720481fd13cd6755f314f11ae8632d538351311f3a8ca7b1a9cf |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:f4f3a1e6ed2be10048c14827c74b9504663e373f1a3a8b32f6d25a1992852e5c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:8707bb8ad0bc0b55d25c34cb8abd9acdf5165ad1b10fbb12e36360f4d6153cf2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:e7907b8dc0a128cb348a7d5abbe1156250ec97768f41cc824975a364300f2f30 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:c8cfca847efb883714b6667a55867df25b2dffff7e702468ec2118a138a40e84 |