dhi.io/open-cluster-management-registration
1-debian-dev, 1-debian13-dev, 1-dev, 1.4-debian-dev, 1.4-debian13-dev, 1.4-dev, 1.4.0-debian-dev, 1.4.0-debian13-dev, 1.4.0-dev
sha256:94c437ce351def9bc1bdb7a94b70f21ceb7d8736e43f8ba4c3106e702e6ff9f7
Manifest digest:sha256:9914362902e68a6dd186875365100355ec8c042ea64b87af75b11d2f7dbe3c6e
Size
71.97 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/open-cluster-management-registration:1-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/open-cluster-management-registration:1-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/open-cluster-management-registration@sha256:8c878f19c088d5ee391d941892f594385f79d728f151d0ec2eb3d3d3f5a56f73 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/open-cluster-management-registration@sha256:721bb75e7d5d10f5947b5dda6996967692275542dba67c52f1dea80adc202520 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/open-cluster-management-registration@sha256:dcbd0615481ba88a140a9d5d7401e082bd43c739350a88f1efbff36485e70787 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/open-cluster-management-registration@sha256:335f48f5575487f02293c2c51cb4dd6770716c78749e4ee4cc344ab8603030c7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/open-cluster-management-registration@sha256:47fe21d47b9504b9b0cc4f1ccd2b25681698496a18223d45f7bb0356e74b1ec3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/open-cluster-management-registration@sha256:e2ee39ef46d094414528bee57e39255c646b0f7443df651b78ebdc275be68e6b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/open-cluster-management-registration@sha256:c3ada6ca9033c6209b41f1072dfac44f5a0ffba252adadd3b3e583e10410375f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/open-cluster-management-registration@sha256:1502ef50f0c266eaa99e18c555bd083e2d1709e77da9e67bc3ae401ca0f4a9bc |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/open-cluster-management-registration@sha256:a15c0317e57e2d16dd33bc2256e2bad812373e01c6f39a1739048e8d014f15fc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/open-cluster-management-registration@sha256:4ef19fc570e08665eb1b2765da89ad109a896be7460e05a88833d66cf84990db |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/open-cluster-management-registration@sha256:1dd4b271f4e3886e6a6dfe800bd950c427fbe4b780c65356b688626ab51f6ca8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/open-cluster-management-registration@sha256:dcb06d82408aaa9d2b61dca7b2cc5bca473d8d490204ae82dfdb69763bc09053 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/open-cluster-management-registration@sha256:85b5955edee1073a9eb5a4ffb1f7c620f28088a81b41db64fe1891c4577f6864 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/open-cluster-management-registration@sha256:9f0e0f699769be53d8431047b483999dff0816553fbaec22137454b0a7fb18f9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/open-cluster-management-registration@sha256:e949fc454b5416c3092607a77b7afc5cae839a3e9e906e08668258af64b40e86 |