dhi.io/redis
Redis 7.4.x (fips, dev)
7-debian-fips-dev, 7-debian13-fips-dev, 7-fips-dev, 7.4-debian-fips-dev, 7.4-debian13-fips-dev, 7.4-fips-dev, 7.4.12-debian-fips-dev, 7.4.12-debian13-fips-dev, 7.4.12-fips-dev
sha256:11dc65ef53bdb263eeedae4cf0bd467149cf6e26da4d84259462d74f6b65f1da
Manifest digest:sha256:a80b05ea7b2c93542a6e4947c430d49ecfe96ae260de5259b4542d90c8ed7c79
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/redis:7-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/redis:7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/redis@sha256:f7706597f7288c63e05d978a80bc46fec0b03420751e8a5943912a2869213469 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/redis@sha256:5cb5a23c660e5a648253c640de78a81bf8af78e4c7bde20fdaa0a809c0b62995 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/redis@sha256:6bd2e8a4a47d7aae7bd115d4e12747ddb84098c417c8c5f3e65f9460bc29088b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/redis@sha256:ac4cd99a921465d7012dbdfd51f4c45a00b2d998e3b2ffbb24e6a66e3eaa7fca |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/redis@sha256:0603994934b195cdea3e6658d9a7778e649fdb95ae62549995b8c55387d89027 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/redis@sha256:1e0bbfb637c01f9bf21a044fd4dee1f794dbb934bc007034b7d5ff86549f6e2b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/redis@sha256:a1693e1b612a81a9425bd54932c29be9c18c155b1ec4dee84776f0cd1173ce64 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/redis@sha256:d370102b14f15fda4544cb55948644f3fbefb3068eef471640072b683d638494 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/redis@sha256:350f50b46c8bb5b4229405f0d0524ecfd03f9f5a1753e4000b8f1ba30df1050e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/redis@sha256:34dd396b1a041b95bdb37f208d9034b16078db92d5eee016132eaaed503bc3d8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/redis@sha256:f344a03f41236d0368b807f30d411d481cb9d5d0119fd8a55810d7b0110d198e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/redis@sha256:0972c41d4d4f37f61c0c4ae8dd0f7dfcbfc3539f136306adda825bc3ebcd3f23 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/redis@sha256:9d18d20f5b947c083caa902e2899c6a795f7b3b92c673f84846ebd22cfd65257 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/redis@sha256:062768082cfdb8783b7c3adafa7ec497e91dfe7e15caa12e8bbf35b90112bebb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/redis@sha256:52106c55cc384b6964d4469dc64e488bf5021bedc8ff8470a8c5c6d9eb680d1e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/redis@sha256:dfd0232060e6b06e15a13b8cba7559554ef102e6b79b02c3a4a1607379fe196f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/redis@sha256:5acfb3a60ab4ccdabfadede9c8c478388f3039be10d26b6f066cb371b21947bc |