Sign inSign up
Etcd

dhi.io/etcd

etcd 3.6.x (dev)

CIS
linux/amd64
alpine 3.24
Tags:

3.6-alpine-dev, 3.6-alpine3.24-dev, 3.6.15-alpine-dev, 3.6.15-alpine3.24-dev

Index digest:

sha256:9c64f92f08757ee269a429f273b0041918d8c33bf966ff5b69efe5efa068ab92

Manifest digest:

sha256:2d534ba49336024fbcd36108aa6ab3640f6ca1eee32ecb7eefc0818bed63719e

Size

44.73 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/etcd:3.6-alpine-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/etcd:3.6-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/etcd@sha256:7545e721f158bd5c99f95aac6e9b6c87ea9195bbe9cbe2973235239c6611b850
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/etcd@sha256:856a0ae0b3971812b5745c88105ca9ad17275b2a5ce7f98e5153ac6cabd24474
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/etcd@sha256:9738fde1e410b8007aa04bec448f9e35b41858eceb14647494891095d98776c7
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/etcd@sha256:70302d45aee18ea4e2a57a90b174ca264861b090edc78004155f85ddadf292cb
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/etcd@sha256:fc744da073a598923b3b36d11058e964832026713beb5aa6e7f68a8502e3c149
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/etcd@sha256:d784b919f8ce472a7dd427d5cbc5ad53321f641a7b05cae592f9366a5691abe0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/etcd@sha256:afe8f4a780d5be82bbb3b56958bbe5d2b265909a795cf1f0f1f11f7d572c994e
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/etcd@sha256:1ce8eb93e1f03b73979f7f035bd3fa7755f2ab329f3a2f91755a7ea108b6e64e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/etcd@sha256:997cfaa1b16c7f316b7695e94beef1261e74e606ed2779dbe755f3aba05f3513
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/etcd@sha256:0cebd4d854c60a36cd3e4c30fa7190ca55fa4310bca307a0fad14b4664466674
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/etcd@sha256:920546fc019d7a00dc895cbe6fbd99786005624c996cdf6ed6701d5957053341
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/etcd@sha256:91fd58c6ebf26f6f946ab9d78896e6304bf1a68617676586e6c0f8b36b4aab08
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/etcd@sha256:1fac016fea8c6545fd223671025142e8d63d4d6f701cd520784ff8868cd933ea
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/etcd@sha256:7963d2b46125a6ee11e2ecd4ecabad52daa85a1efc9232c0079ef51f41959fde
SPDX SBOMhttps://spdx.dev/Documentdhi.io/etcd@sha256:7e204bb6132df6addcbccd2586f596ece987ed4d1a24eced4124e8d4ed4dd577