dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (fips)
3.3-debian-fips, 3.3-debian13-fips, 3.3-fips, 3.3.1-debian-fips, 3.3.1-debian13-fips, 3.3.1-fips
sha256:6fe2efd866705438bccc822f1047ebba62e5c132b1d78493e067e699cc51c9e0
Manifest digest:sha256:695a0e61028dc87b8d7aabdeebad4580d99b55c3ab871bf9395edbafb108d5ac
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:bc7faa4cd9d800c7a72169cff01ca3b124f493972a61fe722f02c121a0d39b29 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:5905ab2aac9aba237cc321aa3c2ae4e124e4fc91a789b6cb952026cb831733ef |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/vsphere-csi-driver@sha256:0c7362ee70d7e595467b9511f6d3bbf7f97951bd134ee254e3de0ed8935280df |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:3d2d11d5abbc5816cfcf8ae6e22828337ed428088548af74d0dd63b690f65fcc |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/vsphere-csi-driver@sha256:8c0718a49591e36041977e30e656f0ec06a85f2ae28662d871126081a6c1e9e2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:03a4ba239963d804c928a4de7c1dc5097f029abdc106af75efac857cadf1fdbd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:97cdb283f9ead3f546e45b4f1e6d62b655857cc477402a634beb8e3cf77a2944 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:14f29208ae307ff8dd19fb63111b7a77e322df4f650f67401794efb59540a745 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:3a833825039a93cec345e85ca69c4a2db99ef4cb2ccbe448dcfdb827df9951c8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:e860279437caa9d29385b73f80f582463bf24fdb23e38c72d11f34384a486537 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:774afcb42129212b3c9ab7c69e0a84e3f891484dcc881d2ceebb9141d93a0b6d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:af6c52caf0f5bc50d9e3e390ff0ea7fbf2100ae791f06cd15f6ce0e5597a0aa4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:68944020444b24fb22137a38b3c4bd852701931888ede6af45b97fcc1066b345 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:150b33d3964792d7542ea3dcc4047c3bb1249e57f3124adcd2eb549b13cf8111 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:bdc1d01fd7a8c1136ca62668aa10e5a4b703b668311c7e907df18b3d568a8d62 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:c6a4781f204643b4a26bb8eb3a4eb12518b50caec500dd127055a04931ed36e0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:d61ba0c0f07d27076c034f422ff3631a9e4d358e48be0ed6b4784a6d1f709406 |