dhi.io/argo-rollouts
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.1-debian-fips-dev, 1.10.1-debian13-fips-dev, 1.10.1-fips-dev
sha256:183de1c411bf9b2a9efbf5444e0d257c75e0cc92d8c87661c0df1e10effc6b98
Manifest digest:sha256:fbb37a33f3208e6461fcc19402b222bf15a065915ca72de250586b0cc0072591
Size
69.79 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/argo-rollouts@sha256:6288892771135d59c43d773c5e6f4aec81e90e4fbb640489639474d36104504b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/argo-rollouts@sha256:600c2834e0c9fb3f25739c68731555666d33acecabb071fbb811c157a5c167a8 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/argo-rollouts@sha256:2305a52a35138a6cb24d6f0070040fe2380e905744ebb84c0ea2fc2b652dd50d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/argo-rollouts@sha256:f045160cfcfbddce4c432f7f984ba3337d35ba8675e2aefe27582e262b906511 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/argo-rollouts@sha256:28ac6d14c3dbbc6316cbcbd21d95559e8230a1253fbec7328909c5597d2e725b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/argo-rollouts@sha256:09bc8e1717827c68bdb6755114d8c51262ddce6a592a5e1cafc0b10a6c166600 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/argo-rollouts@sha256:2689fb03d08b127e32dfe4964fbcc35083d1a8b1bd8ef90891859444b3cc53cb |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/argo-rollouts@sha256:5cc08e7ef0cf42c06fb0dd0ed2c16dcaf95d2e69e1495d9b2b90a5ffb2ea3949 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/argo-rollouts@sha256:05a3e0a4f162fe565a65ad79e24f0d1d5a11f7fe9a1049d484ddc2666f58e91b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/argo-rollouts@sha256:33c2f38dc3b064e8f1fb926a86f3f0189b95a52553e3ecda8870253edab608fd |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/argo-rollouts@sha256:a7c282a755aa32d0886e55473110735c43d290b86a629718b4c692b5bea87b54 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/argo-rollouts@sha256:2b06e33dbb02a5e366066a5838333804f9c2649d31e9b2ef33564e5f90bc9629 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/argo-rollouts@sha256:ce04c19b8bb45f60a96ff48d3ed27a7afd3a12d786fc143ea8a936efe7c20917 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/argo-rollouts@sha256:b5bb5d5c3b8bd9ec1b8ce3ad70f69c286e3bc71c4073347885b37fe96f6c55b6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/argo-rollouts@sha256:004a6eea4a1ce82b5ec6cf7c76a3c041934c6961e07201573855355e5728a62c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/argo-rollouts@sha256:146dfb742d346a488cd170888ed98677fb8cfbd27573f7ed0b74108d883f4137 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/argo-rollouts@sha256:c2bc70cb65bb35d99a32b17fbf1e4f43c44a2b40295f6b818d25505245508d16 |