Sign inSign up
Prometheus Node Exporter

dhi.io/node-exporter

node-exporter 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.12-debian-fips-dev, 1.12-debian13-fips-dev, 1.12-fips-dev, 1.12.1-debian-fips-dev, 1.12.1-debian13-fips-dev, 1.12.1-fips-dev

Index digest:

sha256:2855601040f8a5cd83ce2da2c0b9e62c54692da6bdd94d0f36ee1925731c5712

Manifest digest:

sha256:f9a85b06e478b10a83e30ee55ff7f97fd96c5a586ce1267c3a1fe8c4d5b29bd0

Size

35.02 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/node-exporter:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/node-exporter:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/node-exporter@sha256:bff2a037c5af44b2e3666ac46a66d0e406c60d92830ce35e3e06068b362844ca
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/node-exporter@sha256:c057bcb1ab1e1c0e14100743605529f8fa9d4e662f0d3030e0505a25fb5e332a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/node-exporter@sha256:44a5647222b81ce8520b211cba26e96b5096b642b45caad8d5f9269b55ca6ec9
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/node-exporter@sha256:6278bb78f78aaf8adcda351a7f1b695cb48b359dde97c5b5bd6a3af776def4e9
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/node-exporter@sha256:7acc26955e08b6f9b19212a0a6d710f3f001704bdb84fc7237f6836bef28e818
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/node-exporter@sha256:d32206106b4347db321bc487e895f4df7362fbc103aadd68d1556f6e3345ae7e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/node-exporter@sha256:f7ddafc8e563fc6f52ac94fbf51b372d05cde78c0ca6b630bc8f02ceea1f9b91
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/node-exporter@sha256:4c9c5ed7aabe87cc2986e2a30f8d5cd2d1eb2b4e2ab8fbc9da2ffa66eeeb2f3f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/node-exporter@sha256:0b84bbdb93d0d7d14774c146ea43ee4d9de92a164b70771e4f5e4310d039def0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/node-exporter@sha256:8478e7339083221990182ec491731fe806e890cabb3c3be63e9aea7ba5cbb306
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/node-exporter@sha256:5ff5aa331955b51256e4f72418b3aceb90e8d9b4dfd05dae0b0b92d23800948c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/node-exporter@sha256:144deb8e7f6d402f777bd2bf9707f56e69cc6e4a79b8afd7aa14dfdff76f697f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/node-exporter@sha256:aabfb50dfaa52b729696a6aa4dce379e5be766a1423f15cdcb4335c3cd33195e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/node-exporter@sha256:807c6fee703f244420f5817f0ace0b5556dbafa3e6fcc57a7a11df0a2a0fb4f1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/node-exporter@sha256:095be0c3e8e5eb7a6d197d700c0f94cd14bcb8a30e93ecbb5413468b59df1353
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/node-exporter@sha256:af2cf5e58f02e4b510076ffd98af93080a8ed0eb3e9d5f12ae7e93a1e9355060
SPDX SBOMhttps://spdx.dev/Documentdhi.io/node-exporter@sha256:d7cdea0f430ea5c9aaf627297388c2c53fb38e420aa48a14ff0726af01764091