dhi.io/fluxcd-helm-controller
1.3-debian-fips-dev, 1.3-debian13-fips-dev, 1.3-fips-dev, 1.3.0-debian-fips-dev, 1.3.0-debian13-fips-dev, 1.3.0-fips-dev
sha256:e5ad01dfa9b54ae2de4f4015e39d41d05fb8f87fe221f85303029e55140122c2
Manifest digest:sha256:b8eef9c80f5dad9d4e524f89551fe44f495d13d64fe8d9fb190ece0f51a63a4c
Size
55.73 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/fluxcd-helm-controller:1.3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/fluxcd-helm-controller:1.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/fluxcd-helm-controller@sha256:8e92f6c0b9767d435a94cace529c8b81aa0bfc7187a1af124e588cf1cbc19806 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/fluxcd-helm-controller@sha256:2e10185079b1f00f5470f58bcb1d6dde2e182d98751c59382fa2bfd9dca3a7ad |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/fluxcd-helm-controller@sha256:200db2a6a0a0aa0c3bb3d03ba27958c877844dc0666ed48f43cc8bdb6889897f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/fluxcd-helm-controller@sha256:a028f8aea7b6b24941ac1c1b7ef4bf33f88cab4e5c6c7315f1f0fab1fc0bdecc |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/fluxcd-helm-controller@sha256:cdcfae1ad69b99b0fc78b35f111f5aa41b98d3bc440e5591c086dfbe6985f5ee |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/fluxcd-helm-controller@sha256:3c3f6563cdc828f55b014d608de56b4db6a090a0d30cdb537a960f74028741c8 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/fluxcd-helm-controller@sha256:11099fa6f826b0691734bd93224464111807fc95f86264bfd11491e4cc5973cf |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/fluxcd-helm-controller@sha256:99a54344ad72fc72ec53235b160d1d3e7390a6994c75845d80023366eec697da |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/fluxcd-helm-controller@sha256:5a344f6e9090f97667f7222e5a023c33cd0399e85ad3043086c70d28b4101c6f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/fluxcd-helm-controller@sha256:0564f3c450d57463e9d6c59b90beec59b2bed1018c524f800a380f247549826f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/fluxcd-helm-controller@sha256:1e3b809d5a2a8c99e84558a1f2e95460524466511e9c623fe4d41ed2e6481cb2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/fluxcd-helm-controller@sha256:04b5bd365f500961d9711aa9cbb52a5ba55d5d2ea655cc539e3a299dde6ba985 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/fluxcd-helm-controller@sha256:a0bcebb2678d3cbf88af6d6696f1486eae21777d04b29a53f5e803932d4a461a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/fluxcd-helm-controller@sha256:e127b2af1eb759704372601d16c8810e315bc242755e27701be1027632f98709 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/fluxcd-helm-controller@sha256:2b4dfa5c1997318fad6b82f24b5597e9cbb435f97da145a7cdc940a28d9a8ce2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/fluxcd-helm-controller@sha256:6d7184298bf2cb2e7bc26cd50e7e4e47ab9fff3d61d691b87bcdeadd8c74ffe8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/fluxcd-helm-controller@sha256:05daae17ce3d8a5f077b235dbd7e1bc46ed617d1f3f2847c5791106f33ed73a5 |