dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (dev)
3.3-debian-dev, 3.3-debian13-dev, 3.3-dev, 3.3.1-debian-dev, 3.3.1-debian13-dev, 3.3.1-dev
sha256:d04e53febebfb7b59c9729ab29a6ddfd0c6434be03935e42996430442a1b7a61
Manifest digest:sha256:ac92f1d041dc785d7c8ef1dc5365c2fb007a28c1314dfd5c2a83c6284e734f69
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:7d9cb41b451455e5a0d068b634bd76a9caba0489616ee4201dcd17434bcfdecc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:8fd4ba7e490ca3821f17c771296f3e5247a4bc96be471549d04d35c482504922 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:208b66fdc859d0b1b92695979083f0fa67079562f8952664ec5a6b914f86da98 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:88d005d2d079cc5e20a1b64be0eac2097f26fe6c9e1f8a5a753a84e61ddfccca |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:115c3122f061f1f7918ba5393ac1e4b4c6d98aa1b175275541379581fa94fb82 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:093ac718e5737d2fcb037f1dc5f37a7d0a8945716ca92756b66d64b264af551e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:70fa75abec63140339dcdc26fbaf1a84117b69d5ca5c0f927d7dcf7a99140098 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:0bf025a812ee909636991bbbd944929a5d77536239c68a0bf14b5eda15a52873 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:71e56e56777f988317480ca8ad5d11b071bc5ccd0ed6ec3ae60192a50ee092be |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:85dd2407d16df30983140e6784219cec73df7aaf5017500405c8d5e630c37f64 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:a8e9695e77e10686602a0ffa8175d3f3fd405e7ab32e02aa742f6d5251dc82c7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:0db86bf073feab22bda93b70b4f62bc0a4f5c23fbd0e76b5be7298f30b0227ae |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:39ae3fc294cd327c13f0ee7eba2a02c1a68674de7413cb6bd1eab8ba7fa843ec |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:d48feb33b6f71bdb33b4ff7f3e14d366a904e328bbdae0f9ef582b1cc89f6498 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:3c725f5f0f16c1c8ec6ab064ffd118d455774ec7acbf02126a3adb0c609aaddb |