dhi.io/valkey-operator
0-alpine-fips-dev, 0-alpine3.24-fips-dev, 0.8-alpine-fips-dev, 0.8-alpine3.24-fips-dev, 0.8.0-alpine-fips-dev, 0.8.0-alpine3.24-fips-dev
sha256:ecc486c9068ace808736f0380ed7eebe98c027b8a787a34ddb5e08da0ab855b1
Manifest digest:sha256:317278c90d3156e50ebe944af4b54a85c5526466381ab8bdc92a4aedf2189d77
Size
37.41 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/valkey-operator:0-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/valkey-operator:0-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/valkey-operator@sha256:36632b82139db418e1e045d78f258463e7431732eb54cb1ceefd39904fcdcf3b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/valkey-operator@sha256:c6837bac1b51eb0732fbe21e21394e99e0880a3a0238735e4ed6a5f85c19f6f1 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/valkey-operator@sha256:440f327d7f0ac9b615a6b6559c5447d97eff969c6c8a16762c3a67df519202ab |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/valkey-operator@sha256:8670a7ff009473823f25568898b0dc1bb62addb121c1681a65448fe1395031e3 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/valkey-operator@sha256:a4c708b3d0eb66a91f5fdf2a14aaa5a703216c6a0ac34de8eb81e9354337be11 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/valkey-operator@sha256:069a2a8b2d54cf59acc07a89bf8173a5e41ce2d8c3dcdb411cf13694e3074cb7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/valkey-operator@sha256:0e60b38908ecfb1796a2439cfbabe9607153db862058a42b4ba92e695f91f6dc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/valkey-operator@sha256:9f70c0cce243eb224c7f64ae9b9dde16026fca75e4be3db3b85496157a34868a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/valkey-operator@sha256:51b9af8dd259ad82befd811dbcc854576bd8f13d2ee170fb2e4ef5f5895ddb73 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/valkey-operator@sha256:35cadce638aaf74bb068368008131c0f271e7c4a41e6befb6286f855715d92b4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/valkey-operator@sha256:62af127091aec7b808bbf518faf741cbe3d45b32e999557f1b208d19609c0f22 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/valkey-operator@sha256:7e932fc51a36ab69f51a8af585ad1a5a41df0d42162b884227a95bec4125c1d4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/valkey-operator@sha256:81e23031b16009fbb03861b7f83bae477f86aa918d37fc1d9768242d2f96b026 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/valkey-operator@sha256:f746fdf6bc9f8dbfbed76bd60a04a7b871c7966f7c0d6570c07460986309f327 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/valkey-operator@sha256:751ed6a7a1b2c38ce751b4f720287e403e501cdb975da3c869dd389a9a7fb967 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/valkey-operator@sha256:94aa06d87be6ed40194f168d460e68fd3d5e840450ef3c84ee1350636bf8a073 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/valkey-operator@sha256:e4296948588e0d78b881392e2e9def8581b40e032b80a28d07b407ecb680ce62 |