dhi.io/cassandra-reaper
4-debian-fips, 4-debian13-fips, 4-fips, 4.2-debian-fips, 4.2-debian13-fips, 4.2-fips, 4.2.7-debian-fips, 4.2.7-debian13-fips, 4.2.7-fips
sha256:7c4bcfd03202d2372bc467650648d44a3f5ba80131669316d5267625b9160487
Manifest digest:sha256:0c2c761a27a51a9dafa10657f881ad703f5ac4f2cad87c818933c5601ac1a957
Size
153.39 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cassandra-reaper:4-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cassandra-reaper:4-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cassandra-reaper@sha256:599e82870d688c7ba7c05623853a05a6adfd5b9bd2efe38ddea38e87640a90a6 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cassandra-reaper@sha256:b059bc73901333c21096cc2ec7d79b212101400e2613d3f82788bfb328d904ed |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cassandra-reaper@sha256:49fdd8a6fc74f3e6415f371d96e22137271b24c8e0f83bf70b12aed100990ac2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cassandra-reaper@sha256:2b4f669969cbaf655908cb63026746b9c23929a74ca881af564ff73555740026 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cassandra-reaper@sha256:78155654eb94b3f724ac7d225b859208f36cac147fe75de66c5244edb95bf2c8 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cassandra-reaper@sha256:47d630bbcee323dcfcdf70150e1aaa7a12680dbd9fcef8399a5fa3808a493942 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cassandra-reaper@sha256:9475c9c4e68a029bd8a064b5422fc919067f29857e367b28673a3cde57ab785f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cassandra-reaper@sha256:0ebabc94f34d581f879e194201803f23bfa3791a784d5a8d69797ccb946bfbe9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cassandra-reaper@sha256:a4fc735ed60f726a9b54e6ab7189438338ed81eaa88e990c1c79dd0052d017c4 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cassandra-reaper@sha256:b778d256507e42570d32109ccade52f8971399bc02a59074e06c97e53113ff40 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cassandra-reaper@sha256:f106dd441e626074a8fcf5cdd8c159fe178a33bb49473dae9002e83a09f71265 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cassandra-reaper@sha256:10452397ce687edbed0f73effbd91d94649623abbe1218ffc1a7f86e53016323 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cassandra-reaper@sha256:4aaccdccc005e43eb70685cb798c7e3783eeb2f7fcb3e526f561bc05b12e9d5b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cassandra-reaper@sha256:a8b8f77ede821acdafe1bae437c7817ad6a931a350b72cbb3f12e7ac9e7aa184 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cassandra-reaper@sha256:dabd35327c8283abe03a4c38a3626f18c6244398e857f6b640c068fdfbbb08c9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cassandra-reaper@sha256:62ee5659f2b11114b20ed8ce5450d52f471912cab6928b9d20e4369171e65795 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cassandra-reaper@sha256:0106dc276b2a695aa80a12f3853c1cd9626010886eb7fa0fea1443c3e6d0deba |