Sign inSign up
VictoriaMetrics VMInsert

dhi.io/victoriametrics-vminsert

VictoriaMetrics VMInsert 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.156-debian-fips, 1.156-debian13-fips, 1.156-fips, 1.156.0-debian-fips, 1.156.0-debian13-fips, 1.156.0-fips

Index digest:

sha256:9218851967c48ce4bc62ce5fd2d3ff1dc5090b1fdd53f0ad3efd28658b07a3a1

Manifest digest:

sha256:0f328aa657b94db3a913c0c0f56a4dab9ea5c5e46cfe283c2ef7d1eee55f2c4f

Size

13.13 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/victoriametrics-vminsert:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/victoriametrics-vminsert:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/victoriametrics-vminsert@sha256:61949c29b1091795384aa6f18e0f2f07ca6347f7a25c6dc9357c3661010bf1f1
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/victoriametrics-vminsert@sha256:4bb9a449c88b8b250388db39ba40d55e3683c3753b353dcef028335b3f3103e6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/victoriametrics-vminsert@sha256:9304a96cecc2a3b507eb884c9d4e20db7c9ea073ce34c82ba3953d0d046c5d1a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/victoriametrics-vminsert@sha256:59339850fd1fb06594611f346ce769d61ebe51906fde2c62b257382ade353a73
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/victoriametrics-vminsert@sha256:a9c223296dfb971bfeb45c3b02899f779093f8accbcdf2b2c1b0e7cf9cf064c4
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/victoriametrics-vminsert@sha256:3df685cd65a47aa901eb04776e5c7ad16473bf689e2922b7cb303b6103355c0b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/victoriametrics-vminsert@sha256:9007b0d2716621e80399b5e4d9d39ab92f50b9db696b1975e94489fb4f39bb52
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/victoriametrics-vminsert@sha256:e54720101b59492f5b5c23b236bd518b96d3120be3a167374fa00128d87b03f0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/victoriametrics-vminsert@sha256:87abe847a846ebc3dd3c308441a2834726b8c10bfd88174c0344599d0de54625
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/victoriametrics-vminsert@sha256:ef3b0453bed244f1b5065cc3719824e3b6325dad6b8ffff34984e4956b1b370c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/victoriametrics-vminsert@sha256:973f7f44336a7fefada158e9a0d9d3a719990ca567be9684fe8fd2280f3f243b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/victoriametrics-vminsert@sha256:54f74892b06ba46a44cc63a009c82eef3273d2ae343cbca1b526069c6c795a2a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/victoriametrics-vminsert@sha256:25a727a599be8ee0ef8ec5b92189c9dcd341119775e88f11ca40ea96b2d44777
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/victoriametrics-vminsert@sha256:b5f370bff93b3847410b9a1c80cf9b05a87bcb79517a7f1ccf55718c15637591
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/victoriametrics-vminsert@sha256:84c6264974c4c3cadbbca9b7e6af10fd4951cc29857373d9d6c612ef610b42c2
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/victoriametrics-vminsert@sha256:f35041b4829f251247c62814d92523b3a3a3b23e1f0a572009cd71cbd988e2f7
SPDX SBOMhttps://spdx.dev/Documentdhi.io/victoriametrics-vminsert@sha256:3fb789fd715981a31550e3c1502743c940f3999f8b3030cb0a8e3e06f59cc69f