dhi.io/openshift-console
4-alpine-fips, 4-alpine3.24-fips, 4.22-alpine-fips, 4.22-alpine3.24-fips, 4.22.19-alpine-fips, 4.22.19-alpine3.24-fips
sha256:778b0cc18828f6e2aeec4fd6642dc807551610c949643fda9beeeacedd5c0320
Manifest digest:sha256:92e40b7cd66c8b12c50b62ef9b455b4ed4b009b24d8770e466064269701f2a1c
Size
30.04 MB
Last pushed
6 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/openshift-console:4-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/openshift-console:4-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/openshift-console@sha256:6a75e8a280246f845a5db23c8440a6d0db80d47e4e0da827584a882105bc78f5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/openshift-console@sha256:2e73e959ed469eb02ff62adc5f81949d1d8575053e2e343421c0da6125420dc6 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/openshift-console@sha256:f01ae08352b87794303c967c4ba018dab33ccc8e068cc1b41768c6fdedcd57e7 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/openshift-console@sha256:87234f88ac8bbeba06ca76fc5a7f7656a3233551e0d6d085ca46288c7ba7e2d2 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/openshift-console@sha256:247d0f96df73dbf45b46a3dd4f9585f7cb38515493952791ed9195775159d376 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/openshift-console@sha256:8348d233ebc4d9be3fc244b370b27a47916dd65db68ae7571f845baf6a62f148 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/openshift-console@sha256:5b047b7b54dc7a5ae53c58603613038fdc926f2b608b50cdcb2278b321f6e366 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/openshift-console@sha256:52b67ecaa23ed7995bd881812ea8932c667ddb13e147a88946726f51df79cfb7 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/openshift-console@sha256:eb128d2b2f36b90c66b2867c39f488fa7b00c30623dc5a454889248e940af23b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/openshift-console@sha256:255058106b1b0f4d041f8911ef63c0f1909b2f79c40d1e1850d4955747df966c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/openshift-console@sha256:4fb6aa05642534c768eabd91e6115269055867351d2a4d1ffe46e8fd22a05577 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/openshift-console@sha256:ae408225702009684929e61f757a27e25fe975db747fafbd84aab989a42ea8d1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/openshift-console@sha256:0a290795668c6e8cf1c4225daccb8b970d2b573ced1406de7177a789f4ecc5a7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/openshift-console@sha256:c1f28b301072656e1f50db754a24dd7760c7f89260df7aebc25898b4ff923614 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/openshift-console@sha256:37a8232ced41e4b44e0401a1b306820dbd8a82ddc75be4e1e246db0c01dfec1a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/openshift-console@sha256:e99d40dfd9362786c1aa6209b43318e361acd9d3e10991a7b657700d69e479af |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/openshift-console@sha256:5a3625af355909a996b089912f99f6a49f1b9c91231a077849c8b5364f6a3524 |