dhi.io/redis
Redis 7.4.x (dev)
7-debian-dev, 7-debian13-dev, 7-dev, 7.4-debian-dev, 7.4-debian13-dev, 7.4-dev, 7.4.12-debian-dev, 7.4.12-debian13-dev, 7.4.12-dev
sha256:c88710747803478f3019b0a0033e3388f43a46e6a6552abca60b9d6ce5fac0ff
Manifest digest:sha256:74aca8ccf665f6202fcd2e65b1c095bac0fa1f57b514cae7d34f333b022dc0a5
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/redis:7-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/redis:7-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/redis@sha256:d87d31c010ac7be0bed38e3ec4fdde3f4fa427f4bd9c7b6b057310620f1db106 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/redis@sha256:b42943b95b9c9a94ae4f5e74ce6375b033b49a722ec20f996c404a035c99de17 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/redis@sha256:cf25a3b4044f58a55b7da30b71e5f3d2f215e105dac4f7e33afcf084dd3e9b16 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/redis@sha256:c58736b12d4505e1f126bae14053722380ffbba6e89ff22731de9513f7e4fcd4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/redis@sha256:bce7fb9a11f882f84f31a6e210e270ae9270bb2f0daba7cafea8bc035077d091 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/redis@sha256:844f0f310d43da0f94bed34b54573922d5307a3a207a3049d363d4463d254497 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/redis@sha256:6b13c7082e7f7aa99d9f74ebd10ad1556b07cbb1726e03b987276c6e65eb9e77 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/redis@sha256:37067e181432d359c7683ef2da78f425171f07c0056ead88f6cc17356cf435ad |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/redis@sha256:987a31880cabde23773165286d7e4a7227719f72f70ed1b2534632b14e13388f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/redis@sha256:f703e7299eff7d56b4f35cfc2b3d4cf64aee531a325e40ba6cf69dbe5d3acfe6 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/redis@sha256:2692730163c2355b83afe6ee01af09d70f5868f46de5a34ade003f713c36aa3e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/redis@sha256:4b301314d06de3b22d46cce7021d57fc80c75885a88dcbbfd87f9dac16cc615b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/redis@sha256:417299d655bb7598cb841108ea891e6eddcc8807ea87048a575b9e4b1dec0296 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/redis@sha256:bc32a60eb8f88fcd3244538b10f7527ae4f1242380d9fa67c341d21305a06a8b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/redis@sha256:54423d3a1194655704efacc6271ca105e56a56449c2fed7f62d1506c0b4d71aa |