Sign inSign up
CSI Snapshotter

dhi.io/csi-snapshotter

csi-snapshotter 8.6.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

8-debian-fips, 8-debian13-fips, 8-fips, 8.6-debian-fips, 8.6-debian13-fips, 8.6-fips, 8.6.0-debian-fips, 8.6.0-debian13-fips, 8.6.0-fips

Index digest:

sha256:6496f823b83af726c05eaa3efb7643f09b60b04217e8a90221fb21ebea0d53b3

Manifest digest:

sha256:7702706acb5bd6a4379075512d0a4101638cc093f7d60c394d6e9549fb51e12e

Size

24.84 MB

Last pushed

11 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/csi-snapshotter:8-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/csi-snapshotter:8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/csi-snapshotter@sha256:a7940f619fcdcbb0ccaec7c2c82027200de712e708f9305acb6912472a7fa2f2
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/csi-snapshotter@sha256:6f839832f9f8b1c0e751f22e124d8b13fe14bb47d372e35f3332e1dfa86161d8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/csi-snapshotter@sha256:ac6ee5cc249a16b16545e8aed5603fd6dbd395c84209b80b6d716e40c75f7af1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/csi-snapshotter@sha256:a9c84d44e5ed13d097d1f35047f9c895db20b2d3c1507b228fd2febe6dd5ab5a
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/csi-snapshotter@sha256:2c3a6b01f6d1ba369bf8749cdf44e1932f7567cceba65cf414fa14dbae29ab69
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/csi-snapshotter@sha256:3eb6640955c56f063f6732d20edd438ab4445283c785e3a307701d20eda1f3bc
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/csi-snapshotter@sha256:cbb771485b9718d008424d214ba7df4aac34771c5e349a67523624f33b9a2f9f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/csi-snapshotter@sha256:38f52931f99bdd818750ddce945aec59ef9575974a46e1ce4ab919393f267847
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/csi-snapshotter@sha256:19f07a4b99532ef84e69b5ea663d04d6b77a4f66f6d536b95f484afcce78db5a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/csi-snapshotter@sha256:aa4beaa6da5bb7b7c2b45ffaf3c07674e5a4d2478c75901af42fa2373958d651
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/csi-snapshotter@sha256:68a4f5f0062438a4790e07816bbe234ddd1570da0fc15c6714655f4c78ba9509
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/csi-snapshotter@sha256:6c759b32c4da237878944afc448b4e11c032d6c897d24e63a4a09e6e62d4617e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/csi-snapshotter@sha256:3a987d8f0587f289edcf0bab35aab71d9c9184143df69d497dc8539a82b4117c
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/csi-snapshotter@sha256:b0248427f2fc82a9dedcd47f5d8ab0a54d235dbd90a891baff0d27da1a003096
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/csi-snapshotter@sha256:e5e193cef720c5f07f2927d296f6cc4435cba2be754eaa4506f06962a1d09ed2
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/csi-snapshotter@sha256:92e2e9c898cbb34cb446d719d0bb2c625d900b21173b88b75a4a1cf2ce8ec9a8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/csi-snapshotter@sha256:886c87c7b167fd64ee2cacae698d7a4a6c478d79ee5a3fe41c27ea5afe9b5194