dhi.io/netdata-agent-sd
0-debian-fips, 0-debian13-fips, 0-fips, 0.2-debian-fips, 0.2-debian13-fips, 0.2-fips, 0.2.10-debian-fips, 0.2.10-debian13-fips, 0.2.10-fips
sha256:3d08978339e51bb4a1ff7c0d9d555791e44d8d8eb0e4973c66fdb5a4a45ce6d6
Manifest digest:sha256:52a4c11cf0a4a9433854e31ab4e0668f8f4d1c543dee88deb83f192da396a89b
Size
19.49 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:30aa82282967b37739bf5d91b9833d43645391bb3c2cde84a7ca318732a3f844 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:c23bab4a1572bbcc4c678a9371cb600b3b1daae44d2509e0361e221e69bc6219 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:d3b51c087e57354a481fd462e46471537e84cb89396da0b45054b69ae70c5ccf |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:9b75d3fe5b5708c06e4bb0deb28c27d05fcd476ed5ee53b6370894e2c4e8bfda |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:928551da46950ec512393f8feb9a82d9b30716822c7ab2ee74fab9ec187abdab |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:9bfebe606b2ecf1eb225cc5e9ad0b799301cbe5c56ba6268512ce147420e12bf |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:753b45edef5b066b3c9542c5f56999239e1f1d2d05a74227cde9cfd4940d45b6 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:c3c2cbc1d60780d541237cc153d22f3b3938c69b97c7773c3eb76445c38ba65d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:79aeff88507e5f9d33db3d968a03c2eb30f1606dc49f86b97fcdb365ffd0b91c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:f69c790262d1096230447ba79b6bc02be52a58649c477ce9b4f96fbc46f296e1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:f89db6ddf3c54b4d4c66285fb26140b150763b15513f38eec0d953d733c48653 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:b29f700c350eafa4d5b859a811a02b5efd93d859442ae9a5dbb83da83eff0aa6 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:a515cfbaaef31d4bcda28a058f4c7faaf72c5b112f22a78b5ab95cd52c9199e9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:9f0216619476ea2cab03254704f5a2c8935d129f23cf87854da11e15cd9d633a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:d2c0e80318f07ed1fb0ab6425bf9155ce12816c9fe99f1ffa2f8882f5c14d93f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:f790730c612fc4e150af1614d07477aaeece9b0645406dde70666e09dccbfb66 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:0393cf955b4550d460065435ce10020ed9c32eedf0a1a0ddc2a5434e0c607735 |