dhi.io/openshift-console
4-alpine-fips-dev, 4-alpine3.24-fips-dev, 4.22-alpine-fips-dev, 4.22-alpine3.24-fips-dev, 4.22.22-alpine-fips-dev, 4.22.22-alpine3.24-fips-dev
sha256:5e774ee6c13e078b9ad1bdc411d1fac6d18255f1279caa8c8c2ac91bce0c29c3
Manifest digest:sha256:76b38754875257bdad5f333766c38210d6cc6018c80195b207097fd0d31ef5e7
Size
64.54 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/openshift-console:4-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/openshift-console:4-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/openshift-console@sha256:3a50e4d9c26a0b041f12a7fbb9e16aabcb9c28a42818935eaaa96c1c4fba9bc0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/openshift-console@sha256:8acf25608a6ef2c32ffd0541d1e5e8a7aba8cb84e9ade24615d27f9c80cec456 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/openshift-console@sha256:5a5079b39136cab87f1702bb8f6dae428c853dee52996c5aa9942435af27b050 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/openshift-console@sha256:700115d50377a591ed1ab869d187ceb67b61b3bb5b690bb908b565a261fff6b7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/openshift-console@sha256:392e2e4fe5bf0643713b383628aa428003d867a5954cf85caf0943133fab8d93 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/openshift-console@sha256:9657803c158c88d3a6fad665dac35d53c8a5448c3d94c4accd4c9d0f87c99424 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/openshift-console@sha256:3f6f8036d1f08eecab2f053f84e40550d42d98fbe09c0a70448c20decc0ba24e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/openshift-console@sha256:0d6bf197710cb83e38b235b37e167882e6740ee92a9f66af84b5ce12677d8a8d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/openshift-console@sha256:51b864ce6d08179d80ddf18c2f712a1024137499407743d619a7c3a315968b6c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/openshift-console@sha256:1c232fea4f5e96b3c4ba8640dc07b19e5fec1bdb84a521c214a3aaab1e83cbcd |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/openshift-console@sha256:c94f52a7ef282de8b800fb53c126e53527bc6bc4c4aab217646d05c612369b44 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/openshift-console@sha256:cc5e52355d2663d6fc2c9c9e5eccd708a9e3a797b1fca4d3063b5e106f306ffe |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/openshift-console@sha256:f7a7de548d3787c50358ea023ee7ac857e59519773a4ce0b49cb541ba0bcb7ad |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/openshift-console@sha256:6fa92eb7377848bfb009c960a75147838b3924b2119fab0664a6610b733597da |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/openshift-console@sha256:76493c4177df4859a83caab895c5cb059d6ac4e6d5ba32755054c99eea5ac535 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/openshift-console@sha256:fe672d8224e8c3609a865197b130b09cd37ff93a107d498517bff48eeb87e7d9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/openshift-console@sha256:460bb28afda54b489e6f0cc1887385ac32512db475e3e271ac4740dbb9a8d2a4 |