Sign inSign up
Forklift OVA Proxy

dhi.io/forklift-ova-proxy

Forklift OVA Proxy 2.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

2-alpine-fips, 2-alpine3.24-fips, 2.12-alpine-fips, 2.12-alpine3.24-fips, 2.12.10-alpine-fips, 2.12.10-alpine3.24-fips

Index digest:

sha256:c29f6d4217fa950ebcb408210da3945598ac334d14fd82518c8220231bba25b8

Manifest digest:

sha256:b331bee1e94248c28e2f967a513b79f2e4a2d475469ff5b7296d44f70207f15c

Size

15.33 MB

Last pushed

19 hours ago

Vulnerabilities

1
3
0
0
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/forklift-ova-proxy:2-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/forklift-ova-proxy:2-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/forklift-ova-proxy@sha256:6a494f391c8ce440fc35c370779a9b327427771d6a94919bfba48de2ea4328e0
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/forklift-ova-proxy@sha256:c345108e742f1b5003060436db43d1b6b1a30ce71a7fdcef327126eb1da7f4c7
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/forklift-ova-proxy@sha256:f0bcd83902a3c8b3abdbb9a7c8cc783c134d9d3cb500eda44d4a531f36f39c1f
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/forklift-ova-proxy@sha256:4e18f97f076ab52f71db15a9b9dd9b284b4e677ec0086a141fbd7448fc433180
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/forklift-ova-proxy@sha256:dbc86a4c01bbffb8db9a20eaded106805c0050b6c53d5e13f88e30c09ada8c71
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/forklift-ova-proxy@sha256:fc06a6a21c5980e28345372028b1cafb16c3a763185fab73eef41d1363181bb2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/forklift-ova-proxy@sha256:7e77a314311a303a3a7fafd705bedf0cf0b91af3d5f1451a9799442c28d78e7e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/forklift-ova-proxy@sha256:57c0eccab9344a2d274dc322954bf8aece621a7e684068fed12c2378bbe29e84
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/forklift-ova-proxy@sha256:6a293733b6bf87029c8a237b1de547876ad1182ccb5a02ebe7e886f75cfdd1a5
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/forklift-ova-proxy@sha256:c4ac7bbce343f496ce5a9f7128d287be2e0a3ad215d37d2af3814de537b244b2
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/forklift-ova-proxy@sha256:0b49a34228a14f160725f016050e406017bdbb81650c9a2a805baf1f50024622
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/forklift-ova-proxy@sha256:61a43fdf161d5d2307b2f3e65689a1173d8be41643a07ff2e03c9db7c5bdcfe0
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/forklift-ova-proxy@sha256:611724ee1af8b706e4583a6d68dff3e8e700f2f9818085562333f251b3e1df7e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/forklift-ova-proxy@sha256:0c890c11f5e85e898df2f3589cf819aa7ef57a4c91a9626072865c71eabaf9d9
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/forklift-ova-proxy@sha256:fab211d0744d92d84b0507755d9b19d89750d44838bb76607b03e37ab7baae2f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/forklift-ova-proxy@sha256:3f382c3372422d850010195014528e024763e927655265a26a9f977779941711
SPDX SBOMhttps://spdx.dev/Documentdhi.io/forklift-ova-proxy@sha256:5f815fef23de9e73e08aa2fefde5480e95c01ef123eadfc9f495abdc077eaded