Sign inSign up
Argo Rollouts

dhi.io/argo-rollouts

Argo Rollouts 1.10.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.1-debian-fips-dev, 1.10.1-debian13-fips-dev, 1.10.1-fips-dev

Index digest:

sha256:183de1c411bf9b2a9efbf5444e0d257c75e0cc92d8c87661c0df1e10effc6b98

Manifest digest:

sha256:fbb37a33f3208e6461fcc19402b222bf15a065915ca72de250586b0cc0072591

Size

69.79 MB

Last pushed

9 hours ago

Vulnerabilities

0
0
1
2
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/argo-rollouts@sha256:6288892771135d59c43d773c5e6f4aec81e90e4fbb640489639474d36104504b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/argo-rollouts@sha256:600c2834e0c9fb3f25739c68731555666d33acecabb071fbb811c157a5c167a8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/argo-rollouts@sha256:2305a52a35138a6cb24d6f0070040fe2380e905744ebb84c0ea2fc2b652dd50d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/argo-rollouts@sha256:f045160cfcfbddce4c432f7f984ba3337d35ba8675e2aefe27582e262b906511
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/argo-rollouts@sha256:28ac6d14c3dbbc6316cbcbd21d95559e8230a1253fbec7328909c5597d2e725b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/argo-rollouts@sha256:09bc8e1717827c68bdb6755114d8c51262ddce6a592a5e1cafc0b10a6c166600
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/argo-rollouts@sha256:2689fb03d08b127e32dfe4964fbcc35083d1a8b1bd8ef90891859444b3cc53cb
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/argo-rollouts@sha256:5cc08e7ef0cf42c06fb0dd0ed2c16dcaf95d2e69e1495d9b2b90a5ffb2ea3949
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/argo-rollouts@sha256:05a3e0a4f162fe565a65ad79e24f0d1d5a11f7fe9a1049d484ddc2666f58e91b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/argo-rollouts@sha256:33c2f38dc3b064e8f1fb926a86f3f0189b95a52553e3ecda8870253edab608fd
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/argo-rollouts@sha256:a7c282a755aa32d0886e55473110735c43d290b86a629718b4c692b5bea87b54
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/argo-rollouts@sha256:2b06e33dbb02a5e366066a5838333804f9c2649d31e9b2ef33564e5f90bc9629
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/argo-rollouts@sha256:ce04c19b8bb45f60a96ff48d3ed27a7afd3a12d786fc143ea8a936efe7c20917
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/argo-rollouts@sha256:b5bb5d5c3b8bd9ec1b8ce3ad70f69c286e3bc71c4073347885b37fe96f6c55b6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/argo-rollouts@sha256:004a6eea4a1ce82b5ec6cf7c76a3c041934c6961e07201573855355e5728a62c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/argo-rollouts@sha256:146dfb742d346a488cd170888ed98677fb8cfbd27573f7ed0b74108d883f4137
SPDX SBOMhttps://spdx.dev/Documentdhi.io/argo-rollouts@sha256:c2bc70cb65bb35d99a32b17fbf1e4f43c44a2b40295f6b818d25505245508d16