dhi.io/openshift-console
4-debian-fips, 4-debian13-fips, 4-fips, 4.22-debian-fips, 4.22-debian13-fips, 4.22-fips, 4.22.19-debian-fips, 4.22.19-debian13-fips, 4.22.19-fips
sha256:c61a7c2b95514b553fb3fcf4a946f92b9caf0c33e0fbec410f4a0241f104626b
Manifest digest:sha256:ba5e93e0a4d534d33da4980420bc5c520fcafbd5daee3f1eb4c70b1b53e908f5
Size
34.78 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/openshift-console:4-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/openshift-console:4-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/openshift-console@sha256:268c09260721116fd08a1d221f91888f3f3bafa466e2570576adfa1b08ea0f85 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/openshift-console@sha256:0ecf45254adb011b586c2eca00d62ea6cfed7f9b48db0fa5a20ec288655e8abb |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/openshift-console@sha256:77854eb27b4f7d87c73b69ca7068aa0c1894fea23fe31b3c9aafd9eff3d64903 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/openshift-console@sha256:96f005888f5927141ce8fe2655a34c2af43980273cae834bf8ce5f76ef00e71c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/openshift-console@sha256:0a388bc926b10bd33b0fd6e16161b93d3353832207ba7dd28b8bbda7d03cc346 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/openshift-console@sha256:2517bfd893eb97d1be27f713455e12c8e4ca6d6ed24d408e87df5192e0230a23 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/openshift-console@sha256:d77d9590e12c73eb6fc0b996c08080f40809e4dc2d8af1833ec53f8e29f7e681 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/openshift-console@sha256:9ecb2c54699989bf391e6c07ed0914f8091f10ff2ef824d1d056ae2d4939a625 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/openshift-console@sha256:0cffbae815a90f3e80b48281f04cb4f505a07625bc3394dd39475d8b164e3fcc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/openshift-console@sha256:ba4477a4c9a53babfb43296f74fbabdbb74727094734fab5b08e58b9c3c0185d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/openshift-console@sha256:d961c3682e6d7d2d82a0893f97b98018ef53b0c4f43a54c4eb7682c84d1a9eea |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/openshift-console@sha256:69b1422b1b3d134d07fde8146232303f00e048253cb97c67898d3b34c8db803c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/openshift-console@sha256:c70b3e3fde0add996c492b3ba005ca81e275f1357b25a2bb980832322eec5f83 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/openshift-console@sha256:ae5ce511555c9d42cef3f2ff2dbf1ff86e890e19e3575e45d19571aa563e248a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/openshift-console@sha256:50c5e08e8697c99e731e981fcf16fe9fa3fff3380ff966b005f5269b3d906825 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/openshift-console@sha256:dfa6c8b27f49cf0e70f43088ba0d029ce3fe36720ed4ca78a67adefcfe10042f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/openshift-console@sha256:1c292eeb3894a4fc71433245e69f4a3e9d32a2f97451cc9a18f765fbcef1136a |