Sign inSign up
Valkey Bundle

dhi.io/valkey-bundle

Valkey Bundle 9.1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

9-debian-fips-dev, 9-debian13-fips-dev, 9-fips-dev, 9.1-debian-fips-dev, 9.1-debian13-fips-dev, 9.1-fips-dev, 9.1.3-debian-fips-dev, 9.1.3-debian13-fips-dev, 9.1.3-fips-dev

Index digest:

sha256:eb2622da2707a8c62b1fe24d0e69b7709765c9fed25718ed1dab24bce2fdf411

Manifest digest:

sha256:38c332fe06bef02fabba2f4a3b262e9f26419e0d81a9d6ff85701a36b37de78e

Size

77.86 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
1
0

Support

Active until Oct 2028

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/valkey-bundle:9-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/valkey-bundle:9-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/valkey-bundle@sha256:ee65032e3b9753789e0066c800ade24f968a801a6f2d532adfa90959c874bc63
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/valkey-bundle@sha256:08df5ea0d0f8228d2ca1240824de01b8da2e36d90d87c4a5751a41c989c25fd1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/valkey-bundle@sha256:3aed578c3991b27efbb461a7c22556867d025e1ea620a4adbf2da5d214f935ba
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/valkey-bundle@sha256:06200d34f1a84c5d37056efeca72f8a64e6e161d8365172b07c3dc1303adc091
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/valkey-bundle@sha256:5718378016d3558a103fcabd9a9c82f75b8b7104ed2059619ad79e6f1c6910df
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/valkey-bundle@sha256:bf83ce2d83f2842e2c61ac40959dc063fe9f8b26a3134759b99d502a14a97640
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/valkey-bundle@sha256:22b11cd5e7f74d325b4f0d5afccd476eecdab398d0c7febf6e5834421d55d82f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/valkey-bundle@sha256:62748b39e2027112c0be1959781e056e858fa4107987a61c9907f4ad7bfe9486
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/valkey-bundle@sha256:f6fb5a7f16841cc49d2bda9685ace0522f44cfa96bb695b250a0b13094f2a451
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/valkey-bundle@sha256:b442c0dad750ba3f37a46a2f477e91aeec8ad91f505cd9cd59669ad05a888c7d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/valkey-bundle@sha256:b64ae69e578efbecfa68ef6e846cb9809095e24b4cc89b1a6fd76929871fe9d9
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/valkey-bundle@sha256:7fdf58947ccad95b148956e7faeb5e1e1850502f9d41fc825246ec49ef66b10e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/valkey-bundle@sha256:57b8544fb9cab069bede6f63352c5d7ae27e91336fa64844b4c6c9111520c5a4
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/valkey-bundle@sha256:12c0bf06c513c6339054229853762473bf3a97cc50cbf25935012da87eb223d3
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/valkey-bundle@sha256:b7880ba49cce1c8e8f6fc93d76412726c0e72f8a3496348ddd633d3744c5994b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/valkey-bundle@sha256:ace3789516c460a41e1f132c71e4fb3b24ba179cde2d18bf4e5669f06c935f7b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/valkey-bundle@sha256:9931c31ee90a6a05f9fd74329dd9084edc0115e5076047bc05e4761e6355f88c