Sign inSign up
Cassandra Reaper

dhi.io/cassandra-reaper

Cassandra Reaper 4.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

4-debian-fips, 4-debian13-fips, 4-fips, 4.2-debian-fips, 4.2-debian13-fips, 4.2-fips, 4.2.7-debian-fips, 4.2.7-debian13-fips, 4.2.7-fips

Index digest:

sha256:1b3620654b8bcb8946ea4dcd852f606ae723ea00c9069cfa198a46613ec868f9

Manifest digest:

sha256:451b8d69da4201c6743590d2de544b90837e2c0e1a7c5d7adf90a943f96c300e

Size

152.76 MB

Last pushed

1 day ago

Vulnerabilities

0
8
7
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cassandra-reaper:4-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cassandra-reaper:4-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cassandra-reaper@sha256:0ef5cf8ff41d9ae3b873a02e2c48b8ceccd117e3736ae25821752275c48f3b5c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cassandra-reaper@sha256:3b20c35e3e38e64304c9346d7cdeb534d48caa4972097f58cf91bb43ce8ec423
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cassandra-reaper@sha256:f3f08b3c064d7eafa5282d962261a1f68ba660285da5e7bcfad0c7d1194c89dc
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cassandra-reaper@sha256:1fd041b68814cd0dcb584389f3d8b9920d347e1e0d1a4db49ad6d11432644689
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cassandra-reaper@sha256:f9e8f53f23d006ec1d0f65d40948f037ed1dff77f7a0187c2a6e7755c9de3f4d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cassandra-reaper@sha256:37a630b4abab36f1adfd42d3cb9022acb4cf1b845b872ab59f15c46df475ae04
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cassandra-reaper@sha256:79cddbb96f68d41b79a60f8f75a5fbab49666d98cd6fb90413f73bda9cb43ce3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cassandra-reaper@sha256:a23b571e95b04b2067d2a45a7057cd70f95f671821aa4d1176f46bc8b8dbe10f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cassandra-reaper@sha256:d402bdc99f32a43cda0a225dc4c35d42e2eac2e205e59eb49ec3dfa715698890
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cassandra-reaper@sha256:0b9058829ec74f0d5cef3d6b2275942cf94d35c4cb3cca293ce68f02fc7225e7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cassandra-reaper@sha256:8fdfb7bd28c360d69214c4b1eb8d5ebf2b33d11d78cf7862ce668299df8167ed
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cassandra-reaper@sha256:ec9c4688930069d865cc6b151b7f37990b9e90dab82b6550c8ffd16a314e1303
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cassandra-reaper@sha256:c96c84ed39411ad2d5f186a12e471bdf0b19ddf92f60fa0d12799418bccb5185
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cassandra-reaper@sha256:38a5cf079c1fe1a3341901da5845c2a2aefd5128302a532f595a719aa9dee74a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cassandra-reaper@sha256:d58872bdd62612a8c80e639914c16b29323da7fa445a6449d0d439bfea37c276
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cassandra-reaper@sha256:b8e43713a2f1632fc23535f86d29de8dc990ebf92196142205a30f895b5f4f0e
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cassandra-reaper@sha256:71bc9c6856815046fdceea8ddf029fc8cb740e31c1b2db51d995549b8e6e69c7