Sign inSign up
Console for Red Hat OpenShift

dhi.io/openshift-console

Console for Red Hat OpenShift 4.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

4-alpine-fips, 4-alpine3.24-fips, 4.22-alpine-fips, 4.22-alpine3.24-fips, 4.22.19-alpine-fips, 4.22.19-alpine3.24-fips

Index digest:

sha256:1a07b20b9d9a5c04bbd543c9c33393a665f4ab7eabb0be38f52f57e9ee65e9de

Manifest digest:

sha256:c0f46d947bc4337c855fb9eecbf005fc32ded62f55b4f89f52ced66d34682a39

Size

30.04 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/openshift-console:4-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/openshift-console:4-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/openshift-console@sha256:853ca7c87184211bb4841164b85b9b73cfcfa58ab3d9261caece58e983021043
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/openshift-console@sha256:2dcbeb8777cdb97537262f23c9029d425e74e332aa2713c6288fc9e52cb3eb38
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/openshift-console@sha256:b1c50a32dd701202b7b6d844b092bfbe95cfc26f3cbbacd902da1b4a5f0be128
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/openshift-console@sha256:7591f724f367dc6c1fcdf58e4521f73e759fdf3571081cab009c6cd1c03d1bac
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/openshift-console@sha256:ab18a8033a10e3b358cde4ebc4720df3a13f821e29239467931940db4e0d8a6e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/openshift-console@sha256:05cbc540bd31170ce4df367ba791d5ab5e3286c99c2d20a2aa105e18db29aa67
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/openshift-console@sha256:2a7eebe8278a1556f85fdd3c54b8a49e4048d1ff2b81d107fcbc6ffeebb36edd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/openshift-console@sha256:f06587683e67e7942e5d705cdc000cb370c41afa1d458119b6f648ada4ea6932
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/openshift-console@sha256:ab8aeeba350d7527b8fa1297b5422f6000a866010450ae78fd40381650eae38f
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/openshift-console@sha256:bf70ea874561f272f91fdd32731e9098619d1f0f2a917f54ca0dae6c1b459963
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/openshift-console@sha256:29282d39829b5a69a719c5c14225d1c4f5644b7857f9f788e89981a5d3c8da66
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/openshift-console@sha256:68e92c2b08275e3a3002c5d8170c2d0c1be231a3c89954cedad18b2c536acf0c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/openshift-console@sha256:ec5db10a8efdde545335699be40b3dabe1d1b8e43419cc998f1841522666a26b
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/openshift-console@sha256:380df33244be4e5eb2c1b39f2f08f437515e2196aba622569150a7f188ba6b2e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/openshift-console@sha256:54349ba32361a08e824215e6ccbae05b88fddf12a683b1a24af380acc6368614
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/openshift-console@sha256:97a8ac5b62071a51a4b9ea7ef9c67c220a6e9fd14f54070a34ddae71e9b09932
SPDX SBOMhttps://spdx.dev/Documentdhi.io/openshift-console@sha256:02dad33492a30cd7d3a267d108782320553e2d5699b5a9d94fb5f348ae5e3001