dhi.io/populator-controller
2, 2-debian, 2-debian13, 2.12, 2.12-debian, 2.12-debian13, 2.12.10, 2.12.10-debian, 2.12.10-debian13
sha256:e33f8d3fab1a0863f1cb53f3bb2d1210b3518a102f71d11e943729d48e4d19d0
Manifest digest:sha256:dbe0e4752f4fcf2c458538185cf79d3be0afbdf4953119ea918f90f90955a84b
Size
17.32 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/populator-controller:22. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/populator-controller:2 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/populator-controller@sha256:c2c931be5ab27c58dd1f6f6ac3585bf3ae444f9aacb9a6c083da9b77fb836efe |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/populator-controller@sha256:6e8395bcd1b1d0512d3320bd64cbaf53d3f002c7b9241b027066dcce22674c08 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/populator-controller@sha256:9c9ac9e64e59920bd0ab5c80ba691733f209c885535cf8025ac8a2f61bb6a1cd |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/populator-controller@sha256:92ba73382173d8705abcea42d6b7e3fcdd45eff8ca9ae48489210fc9b04215f6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/populator-controller@sha256:7719d7f7b2e78dd109b2865c67e652c837279710ed2a0bde2c71eb981cac8525 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/populator-controller@sha256:98b283ee49bbdce3ea2d2c5babc6a82030b3a75ef638d65db6fded19221a879e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/populator-controller@sha256:c0e18b337d303aeac0663592f983998e71201c37b60e0999b6567e888d600d12 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/populator-controller@sha256:407ce10acfa36fb61a07e396a3231d94164da3c2ed1392c30804c069ac6b1641 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/populator-controller@sha256:03c0aad6c542e629ffb3aaf91d21d8ddc7a7aa2a3252a29601ed9c5324e991c4 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/populator-controller@sha256:f5fb9f51ba0999d49bd9e2424bfeb2f8c2cbb53b600510da8b296bb110401562 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/populator-controller@sha256:4167b41a19902054a7292c6bd13b34cc17cbc916d2e7db61c45fad4069bb32ac |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/populator-controller@sha256:4dfc45b4fae0d20a5457ef8c7b7d301888dd4ef25491205f8dd8ef20beea4ecd |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/populator-controller@sha256:ebfeba339aef6221276ce7dac44416879ace23ce25a8504196e596993a2284f7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/populator-controller@sha256:3a202db68db76a53ae09e233e0506989a7b38d47fd7e97c9fe43bc31c58de15d |