Sign inSign up
Qdrant

dhi.io/qdrant

Qdrant 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.20-debian-fips-dev, 1.20-debian13-fips-dev, 1.20-fips-dev, 1.20.0-debian-fips-dev, 1.20.0-debian13-fips-dev, 1.20.0-fips-dev

Index digest:

sha256:17cbbecb6cc5de1f8325d13ea52e2ec07e349e9648a593ea1490a7d604b71dc0

Manifest digest:

sha256:e3ee97b165f0dcbb5bfa8f842d0efb3ac1471aa2bb2ab0a58357fd0898c73859

Size

55.55 MB

Last pushed

9 hours ago

Vulnerabilities

0
0
0
1
6

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/qdrant:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/qdrant:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/qdrant@sha256:1998000c3b18e0c09c778c985739c746725420ce3f152a33fbdbc3ac3bce905b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/qdrant@sha256:9aa09c4b5ed8ef30a0f7ec33f0a9d115fbfbe4e4a5bd756b1eb9d9d47aa7e08f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/qdrant@sha256:98a3cbc170481e47736f3260c736b78a583cec4257c89e7e090fb6438400dcf9
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/qdrant@sha256:1e6ba2b5f3655a58f0f651d8ae0e11b46a19a64e70de03aedda9b7d86d0f9d14
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/qdrant@sha256:ee77f632eafe4c7a4729517b9f99312a04cc0203c7e866ebafa2353442903d55
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/qdrant@sha256:bc23151dd3ff0df3f182a38ac261dccb4e5d6b22f793ecc61fb4df1cb9daa2d9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/qdrant@sha256:e5fedbf351216e4daeb40fcedf728864968df35041408417bfc40f37336d7a2b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/qdrant@sha256:8a4e9cc4493378221727cede81adb0a15471fb21e14b11e67300577c5d497d0e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/qdrant@sha256:882f319882065370e1172c90b818041f688d524a2b75712cec2d1dd4e618d713
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/qdrant@sha256:bd8ce758ed6a87f0d0f4cc010e3d4c50bca16645734eced4dffa1b96111a8157
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/qdrant@sha256:c1cac5268195932393b68fc0564b0f19b93a8d4c07d68eb804d53137ff840377
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/qdrant@sha256:c08802600b5b2ca8b0589b7a481792d5efb051208a74bda44edef3059ea691df
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/qdrant@sha256:3d4132cf7069048728f17ab0157e1e46ac116cb2d5e3a63d3ca1848c042e75e2
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/qdrant@sha256:2f0be15d19d3c47fbb5d54767230a2282d38b9d51f1f4c666797cf2f7f184dd7
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/qdrant@sha256:dd655a96ec06416a1995469f637197c7b17a603e02176743d30e40496e6a9779
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/qdrant@sha256:6afb65ca76d6e9f9ae7999adc6753261233d68abe0d335f051d15ffeee938734
SPDX SBOMhttps://spdx.dev/Documentdhi.io/qdrant@sha256:31e71962b2483d01b411696ea5516c07d1b21a0cf54e0388304e879a50723e28