Sign inSign up
Dapr Injector

dhi.io/dapr-injector

dapr injector 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.5-debian-fips-dev, 1.18.5-debian13-fips-dev, 1.18.5-fips-dev

Index digest:

sha256:4e55de0a4d21e7531e7a4e16d7e6a8fd7dbc7475ea26aa31228c8a2cd670b1b5

Manifest digest:

sha256:316e88eb124f0a0031e70efa645c936b0f33c8651af8aa8263e9413b83610326

Size

51.22 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
1
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/dapr-injector:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/dapr-injector:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/dapr-injector@sha256:8cfac6f58fc452d921177cd1f580942636a7eafcdb6bb5c09e908c739bb316c2
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/dapr-injector@sha256:bc9d2381aff665cd652c7867020f8ab77ea41d0ca8a4780f3e9fe85885895cf3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/dapr-injector@sha256:7c0f65d6c2c8f7a7f1224c680b0b1a37b98dadd13e1c5fed299661b6a24560cf
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/dapr-injector@sha256:7d6144d4d1bc372adc12ff10bcfbedb9b46b408a8fd4f36763fca5843495faaf
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/dapr-injector@sha256:1b73b1d9f6ef4908fa91d2a39b9c49d454ac7ce14df4f6e355707af088e2f9d8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/dapr-injector@sha256:528918a95b6785d15e25ccb0736db351a7570891e01bcfb1b9d34cb641cf794c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/dapr-injector@sha256:8c0eba4f4802591b11fc330738c8d97c7230e04703f7b6b300cc32eb8ace1cd3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/dapr-injector@sha256:6aa47d93cebf01ef658e34331c117e957fd5861313929389ac80a28c66b9a729
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/dapr-injector@sha256:9451bd3c56e0101ab31aaa4c1e613c953febd4a5bffab5b8bb16c1ecea55cb0d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/dapr-injector@sha256:b47c681158d15eccb6c5b36068903f69b9fbd16e99da03a03b37cdb3c456e5ec
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/dapr-injector@sha256:db1a38aad46484941dfc81029b128ebd7cfaac05125603402a4b4c663af89b66
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/dapr-injector@sha256:c2df46f38f6a583f20698f6b69435cba1193d58f41f55e832331a6408007580a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/dapr-injector@sha256:9b285f49908a7123978c8b2d6749de7c94f7a9b2fe55e389db886b78024805a4
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/dapr-injector@sha256:b5c023f2a60f29ac0299d10957911daa35784516f970fa5ca959e74963904687
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/dapr-injector@sha256:5e976679ebffb48646a12b09fcd32e5b82767d31747f9fb059976966abd33efb
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/dapr-injector@sha256:e8d49dbda40193d0489c3023f9504316ca5e8548b7268c63ff7e0e65f3c7962f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/dapr-injector@sha256:6c2e32ac04526650e60b7bdc6aa7a9207b9a60e12e2ce74cb345cccf0bbee580