Sign inSign up
Cassandra Reaper

dhi.io/cassandra-reaper

Cassandra Reaper 5.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

5-debian-fips, 5-debian13-fips, 5-fips, 5.0-debian-fips, 5.0-debian13-fips, 5.0-fips, 5.0.1-debian-fips, 5.0.1-debian13-fips, 5.0.1-fips

Index digest:

sha256:35119a69b8126803364b29147699ce4c882de4e9f8a73bd380febc32e3c82701

Manifest digest:

sha256:ae76d6c6fd978cf843c026fe83f6e4bae1a7d6f031c4428d03cb62d67661fda5

Size

156.05 MB

Last pushed

8 hours ago

Vulnerabilities

0
8
11
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cassandra-reaper:5-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cassandra-reaper:5-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cassandra-reaper@sha256:5111e3b0126612b51dc006c00904f5ede8440eb9c24f4fffd5f8f77e215237c2
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cassandra-reaper@sha256:15bd8e00b3a8df1d768db85bfe5cfad59e31095b53ab5b367f43fc519ad06ab6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cassandra-reaper@sha256:ab278db410b5ed102ab0c9c79fd01d481ca50e3ffddc30c93150bd2c8f7cca0c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cassandra-reaper@sha256:eb97488e77ac00923de6ab942d0a4636bfcb2f9a8cfc0b33299deb25507ede03
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cassandra-reaper@sha256:1410dc683267174e2efb71a7b5a8366529d3139e619f5dde9ff7c5d89d788100
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cassandra-reaper@sha256:a830c66ae93da6ef9e9700024c751d579f89996cbfac0d7a4d1d786a1d203a8c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cassandra-reaper@sha256:f91d009367167e4ffdd278e8e2610d4cb1ab5c7ff5ce2de5d12d2f33d50997c3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cassandra-reaper@sha256:e3736acb932a98746e056e3b03a5b307159ed70ff70628510855f4771ab570d7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cassandra-reaper@sha256:ef4d9c0e8d12ff1af3016c7a66204d41919f368beef4a3527838de3242f37b8c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cassandra-reaper@sha256:16c0d69d8f601852242bbba273811a49ee8d99ddc3c2d7761174e6ab335dcb74
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cassandra-reaper@sha256:26292c909352e0158d9548757508155d182b8a2562c6c715bc8107adbc10903c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cassandra-reaper@sha256:fd08c6fd935a652bbf1ebeec8926b9c6fc5d84f0f53fea5b4101747449ead3a3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cassandra-reaper@sha256:2177a36ef7eeeab11754046d561e3b34f5959529ec8b3a989401f50f81d2f644
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cassandra-reaper@sha256:1e0c345e85b5f22ad97233bdc080d22261cba43ab06ff2d30aa9ce3eac77d18e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cassandra-reaper@sha256:425044486b81517e7ce5199e1aefbd2cd006c63099a51cec1308c0cff9712164
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cassandra-reaper@sha256:4fc985af95a2200d29dea5e5eadc3e65d24f03b7b3a652cb6a996ea628ab7e23
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cassandra-reaper@sha256:637d0f0fa855f65dbe334e9675c5c8cfea3930b468e222d4b1569eb62af42f48