Sign inSign up
CSI Snapshotter

dhi.io/csi-snapshotter

csi-snapshotter 8.6.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

8-debian-fips, 8-debian13-fips, 8-fips, 8.6-debian-fips, 8.6-debian13-fips, 8.6-fips, 8.6.0-debian-fips, 8.6.0-debian13-fips, 8.6.0-fips

Index digest:

sha256:5305636fdc3b331d3972e8d4c67b92fd395fdd10a82d86d1f9de779b0a8ab40a

Manifest digest:

sha256:2c8b5d1f9bf1414144cf1b0e3110a5c985710025437705cec295b1153d9413a6

Size

24.81 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/csi-snapshotter:8-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/csi-snapshotter:8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/csi-snapshotter@sha256:653ac5d4cf0973beb6dab659e68cbddbd1a13161d4aa19b443f1d9add8e6fc6f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/csi-snapshotter@sha256:539d21f8447dbed5bd16459137c0e82e98db2e7e113303550600525c093bf415
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/csi-snapshotter@sha256:1b8eaf3f2f55bf0ab5491f2bb3588a2eced9e885662d3c0a2e825189a22170ed
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/csi-snapshotter@sha256:e6bc10400ac2324a5c53c52b8ff66e4bc93e669056464b26fbc6b73b2c8db5d9
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/csi-snapshotter@sha256:1dc0bfba07287f266c84ef14c067030c8217b1f227e6ca94efa1b78ccd17f41d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/csi-snapshotter@sha256:03bfe826f71c02981952e331049632c79ca8a0f7e6a84e12b0ac5dd32423e817
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/csi-snapshotter@sha256:b1821666807ef18f401046f0b39d34daa65cabce925268139f92c0052b827332
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/csi-snapshotter@sha256:48861e3bb54c7ccabcb7b2a6349686cf2e6c4785a699e4a17ece9955484b8327
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/csi-snapshotter@sha256:898b79cf4e09ed432b0341167d15f581e1123988207b447b610b0a432ecdb1a4
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/csi-snapshotter@sha256:089c7ca0626b16d598cb3265dfa356ecf36aa7aefcc732f864c235fc207067d9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/csi-snapshotter@sha256:8898b36dc9d3410c7062aa8bb2b42c526015ba98601e902b29d768fb949fd603
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/csi-snapshotter@sha256:ce103d5e18f60498a984802e02550cca5345dcbb850d9d2f73fd22f4a71f248a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/csi-snapshotter@sha256:dc539098138f117ebd6aeb4b9f70e903b690dbd74e8b0ea9903886b7fa807225
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/csi-snapshotter@sha256:71ddef2490b94b664265eccad3a8a1777648b93ec2872fd971eba86707679219
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/csi-snapshotter@sha256:299ad945e9986124ba742ac310216aa01359066ffef6adb37e96eaf6ad70c125
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/csi-snapshotter@sha256:fdcfaa5d748c88c559c7d6e180b4b14c236a5ea8530a16631eeae7822bfc0527
SPDX SBOMhttps://spdx.dev/Documentdhi.io/csi-snapshotter@sha256:579c1eb78f9eb0b688ff87bf022c8a28716cb5331b55a4015037a942249b6d92