Sign inSign up
Console for Red Hat OpenShift

dhi.io/openshift-console

Console for Red Hat OpenShift 4.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

4-alpine-fips, 4-alpine3.24-fips, 4.22-alpine-fips, 4.22-alpine3.24-fips, 4.22.19-alpine-fips, 4.22.19-alpine3.24-fips

Index digest:

sha256:778b0cc18828f6e2aeec4fd6642dc807551610c949643fda9beeeacedd5c0320

Manifest digest:

sha256:92e40b7cd66c8b12c50b62ef9b455b4ed4b009b24d8770e466064269701f2a1c

Size

30.04 MB

Last pushed

6 days ago

Vulnerabilities

0
1
1
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/openshift-console:4-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/openshift-console:4-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/openshift-console@sha256:6a75e8a280246f845a5db23c8440a6d0db80d47e4e0da827584a882105bc78f5
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/openshift-console@sha256:2e73e959ed469eb02ff62adc5f81949d1d8575053e2e343421c0da6125420dc6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/openshift-console@sha256:f01ae08352b87794303c967c4ba018dab33ccc8e068cc1b41768c6fdedcd57e7
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/openshift-console@sha256:87234f88ac8bbeba06ca76fc5a7f7656a3233551e0d6d085ca46288c7ba7e2d2
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/openshift-console@sha256:247d0f96df73dbf45b46a3dd4f9585f7cb38515493952791ed9195775159d376
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/openshift-console@sha256:8348d233ebc4d9be3fc244b370b27a47916dd65db68ae7571f845baf6a62f148
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/openshift-console@sha256:5b047b7b54dc7a5ae53c58603613038fdc926f2b608b50cdcb2278b321f6e366
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/openshift-console@sha256:52b67ecaa23ed7995bd881812ea8932c667ddb13e147a88946726f51df79cfb7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/openshift-console@sha256:eb128d2b2f36b90c66b2867c39f488fa7b00c30623dc5a454889248e940af23b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/openshift-console@sha256:255058106b1b0f4d041f8911ef63c0f1909b2f79c40d1e1850d4955747df966c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/openshift-console@sha256:4fb6aa05642534c768eabd91e6115269055867351d2a4d1ffe46e8fd22a05577
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/openshift-console@sha256:ae408225702009684929e61f757a27e25fe975db747fafbd84aab989a42ea8d1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/openshift-console@sha256:0a290795668c6e8cf1c4225daccb8b970d2b573ced1406de7177a789f4ecc5a7
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/openshift-console@sha256:c1f28b301072656e1f50db754a24dd7760c7f89260df7aebc25898b4ff923614
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/openshift-console@sha256:37a8232ced41e4b44e0401a1b306820dbd8a82ddc75be4e1e246db0c01dfec1a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/openshift-console@sha256:e99d40dfd9362786c1aa6209b43318e361acd9d3e10991a7b657700d69e479af
SPDX SBOMhttps://spdx.dev/Documentdhi.io/openshift-console@sha256:5a3625af355909a996b089912f99f6a49f1b9c91231a077849c8b5364f6a3524