dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (fips, dev)
3.3-debian-fips-dev, 3.3-debian13-fips-dev, 3.3-fips-dev, 3.3.1-debian-fips-dev, 3.3.1-debian13-fips-dev, 3.3.1-fips-dev
sha256:6f6d97dfeae60c2618a141624c845c8f8d02695f91b7d3c19fa753f31b3d23aa
Manifest digest:sha256:93bece5a8eac92f81f45c000ac4de05a04f59bf264eeaf16c336006ec603d9cc
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:0e40ee1b5aa6d98cf2f48370b7d4a642505283116452309bb48eecfb2e7245a2 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:1a22074057f2c12d856f9e2518914cd1479fd8bd74c6f2e91f971919472b1fcd |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/vsphere-csi-driver@sha256:b326a9633215173426677685408f57fd8a730019f54e78b55798278d77ba0580 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:e35c4b40a2c115c89998106da0f8f7d3f56d087a2d938a147a0cf43d7478f15d |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/vsphere-csi-driver@sha256:d5e6535e81f9cd7575391e74754c587207ca1550dffb65a41c0106374f28a1cf |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:2052ef1f80d04e49ab2ed340b9ea7c3ecf12cf854b970d94bb729c16bfb368f7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:379fe1099e9cfd899a79019f65d70fd3a4fffc69856acc9f5be16d17dc79e5a7 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:b438af3be8710859808cb398c6c14d95149a6601a17813e423e05f7b03d687e5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:401ea5716a41cf16bbd326379d9ae7d102a81aebb499a69ce755b320719e40d3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:6d38f08a7c93f31d528d04dac2e1c3a78ad32a631b26158612b6bf0e3b12905b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:ddc8804cbcd135dd27b5625114f2646e670a32b3149477b6de4585a439a9a571 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:1d010af9e4a0854c3e7b63142d56e506fce9f16781bbc3a1ba70b7ebf907be74 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:b43d4a4bcd11c92766623f14be99a7b7f7001ea25c91363f88c866c5e44c8598 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:365022c719ae08518692747d4b54353ef77e2790d8a8b4db3e21820921df8946 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:49d18fe2e9073b8c58f853a4d07a9b119b63cc36508ea3ae0bf145788ec65528 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:7c3b7069120d2a59a32dd9ee5e0ab77be0210e63c1a33fa057fc574ca185940f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:73ae838219d4f16d49820f1c69e7b4da9c6cb67bbf104bbd5a2a9004b969823a |