Sign inSign up
Strimzi Operator for Kafka

dhi.io/strimzi-operator

Strimzi Operator 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.3-debian-fips, 1.3-debian13-fips, 1.3-fips, 1.3.1-debian-fips, 1.3.1-debian13-fips, 1.3.1-fips

Index digest:

sha256:f58c996e5e1ce51995054329afcccb168ec7b699b73117fcacfeb63cbc71b46b

Manifest digest:

sha256:bb3fd56a7084837a3ea5c70ba4c34352c55adcde2348cdbe450713cf459bbc48

Size

149.49 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/strimzi-operator:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/strimzi-operator:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/strimzi-operator@sha256:d161ccd9c823d51e8ca981a33423f1dd1daa87e56fadfd145a727d412ab20952
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/strimzi-operator@sha256:c4cdd0431d38ab34f4e4a832cd3167b5089fc9f9cdeece4343d1c6e59a2eeb89
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/strimzi-operator@sha256:7f97968bf80f33b10fdfc43be233b8d79b5056f029cd588fc8fba8d96e427907
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/strimzi-operator@sha256:c906ba71dd7ab04fa9a2d365152a144cee7455b673ff43d7f62170756a3cbd94
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/strimzi-operator@sha256:d08105ae055b650817f9823915b4601c3f37709dc4a66cbb89ccdc65b9bded0c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/strimzi-operator@sha256:e7bb88e4a7e17e421db6d135fd486a37d1f544066826ef924948369fd00491e6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/strimzi-operator@sha256:ac7c3007d944021ec7be87f24c7ab4eab6fa34f5d603536a4496c57672220992
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/strimzi-operator@sha256:d4f1892d1cdae47d18004d5ebe1266690aaf85799bdffa32ca2a9d6d0455518d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/strimzi-operator@sha256:f525b51843d7805b6f467e55688a5227e4e59a4a7dc7f43eed316c8b7f79671d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/strimzi-operator@sha256:b3f0da9925536fc583f860bf6407bf26386978e4edea88dc7d48f1437c2a0a7e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/strimzi-operator@sha256:052d986f009d1e665d6f658c9256242ff5653d8ab73b8ab3b4de45765cb759ac
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/strimzi-operator@sha256:74adf7f10451533076490e96fd356440a3a3dbf7ea229f87bbb6d3e4da5da381
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/strimzi-operator@sha256:cba82f35fd5a0f3faf51c58305b7410d1ac33c61e3f02af36a090d8d26ba6fcf
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/strimzi-operator@sha256:c2029f62cbee27ece0a996741b9f55f73b72bfcd818c741830033451c4b0a8f5
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/strimzi-operator@sha256:d3729ce0f2699ab1412ccc455c0c43e9f756c04bb811621458faaa260f8d8d95
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/strimzi-operator@sha256:b81bba2ffc1c1dd5441683b0d29b4f0328c281a48fc9957c851af8e8cc6d2dad
SPDX SBOMhttps://spdx.dev/Documentdhi.io/strimzi-operator@sha256:df8425dacce79fca71a12fa95e66581179877d8a47c1b10bcb7d2d7afbdce845