dhi.io/csi-snapshotter
8-debian-fips, 8-debian13-fips, 8-fips, 8.6-debian-fips, 8.6-debian13-fips, 8.6-fips, 8.6.0-debian-fips, 8.6.0-debian13-fips, 8.6.0-fips
sha256:5305636fdc3b331d3972e8d4c67b92fd395fdd10a82d86d1f9de779b0a8ab40a
Manifest digest:sha256:2c8b5d1f9bf1414144cf1b0e3110a5c985710025437705cec295b1153d9413a6
Size
24.81 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/csi-snapshotter:8-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/csi-snapshotter:8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/csi-snapshotter@sha256:653ac5d4cf0973beb6dab659e68cbddbd1a13161d4aa19b443f1d9add8e6fc6f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/csi-snapshotter@sha256:539d21f8447dbed5bd16459137c0e82e98db2e7e113303550600525c093bf415 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/csi-snapshotter@sha256:1b8eaf3f2f55bf0ab5491f2bb3588a2eced9e885662d3c0a2e825189a22170ed |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/csi-snapshotter@sha256:e6bc10400ac2324a5c53c52b8ff66e4bc93e669056464b26fbc6b73b2c8db5d9 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/csi-snapshotter@sha256:1dc0bfba07287f266c84ef14c067030c8217b1f227e6ca94efa1b78ccd17f41d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/csi-snapshotter@sha256:03bfe826f71c02981952e331049632c79ca8a0f7e6a84e12b0ac5dd32423e817 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/csi-snapshotter@sha256:b1821666807ef18f401046f0b39d34daa65cabce925268139f92c0052b827332 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/csi-snapshotter@sha256:48861e3bb54c7ccabcb7b2a6349686cf2e6c4785a699e4a17ece9955484b8327 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/csi-snapshotter@sha256:898b79cf4e09ed432b0341167d15f581e1123988207b447b610b0a432ecdb1a4 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/csi-snapshotter@sha256:089c7ca0626b16d598cb3265dfa356ecf36aa7aefcc732f864c235fc207067d9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/csi-snapshotter@sha256:8898b36dc9d3410c7062aa8bb2b42c526015ba98601e902b29d768fb949fd603 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/csi-snapshotter@sha256:ce103d5e18f60498a984802e02550cca5345dcbb850d9d2f73fd22f4a71f248a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/csi-snapshotter@sha256:dc539098138f117ebd6aeb4b9f70e903b690dbd74e8b0ea9903886b7fa807225 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/csi-snapshotter@sha256:71ddef2490b94b664265eccad3a8a1777648b93ec2872fd971eba86707679219 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/csi-snapshotter@sha256:299ad945e9986124ba742ac310216aa01359066ffef6adb37e96eaf6ad70c125 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/csi-snapshotter@sha256:fdcfaa5d748c88c559c7d6e180b4b14c236a5ea8530a16631eeae7822bfc0527 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/csi-snapshotter@sha256:579c1eb78f9eb0b688ff87bf022c8a28716cb5331b55a4015037a942249b6d92 |