dhi.io/forklift-ova-proxy
2-debian-fips, 2-debian13-fips, 2-fips, 2.12-debian-fips, 2.12-debian13-fips, 2.12-fips, 2.12.9-debian-fips, 2.12.9-debian13-fips, 2.12.9-fips
sha256:8ced26d93c4b33046befff8064babf72e587129c967c17b21649c94204ed8152
Manifest digest:sha256:064e8bdd1af87a50ec65be9c962e2b09d99d7fbefd50396cd9bdf1313c5b6d21
Size
20.37 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-ova-proxy:2-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-ova-proxy:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-ova-proxy@sha256:4bd7e3549aff87b0adec310fd1041a69110be0847fc2f1cd9fe9fe34daef85a4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-ova-proxy@sha256:eae750cf696b31560fb8cbd0dc3f2fa1015ebd9b3358c6dd17a9b14cafc4aa11 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/forklift-ova-proxy@sha256:97e2418340cd6888a17af75230099e2955484a80907dc93f0e7ae7a5d3746962 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-ova-proxy@sha256:06813fbd63998b99755730ca3035cc28f2caceb4682d8cf8824bcf7d96edfe5d |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/forklift-ova-proxy@sha256:c7c54ce3535a4c3bd7208505478d45d5d22449a3b26616966c651642f772b934 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-ova-proxy@sha256:608fa0a46336443232794753faf3b588d52d993e53a5cc24b7ed144a044e0244 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-ova-proxy@sha256:054454f19542fe545f48dfb16202531431d361af0f4abe0237ff5574b176b928 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-ova-proxy@sha256:e3ba1b833eebd02b8ed448993ac38d0889a6155652c0b106603d95818c5e0820 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-ova-proxy@sha256:6642c1b408a66f3b1124e7305258b20eed3ebf2bad7d84aa868c8e69281d0640 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-ova-proxy@sha256:5308dc994365796ad0a56082ee5363299419d26181cd4fbed6d84b25f4b10e35 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-ova-proxy@sha256:b3424a69b5fe93866b20ac6840bfc022f54d047d36bcb6c67ff2ad6d90f92760 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-ova-proxy@sha256:efc054c11d5711d70999ccb9edc13b006c66f71b2d9d8e4326c69016d21b5c68 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-ova-proxy@sha256:242a4bd1a019dade96a40852f4752498352fcd8edf35dd69cbc92b18c8be4d10 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-ova-proxy@sha256:7804fae2aa0441cfca5ec359070c0ef10f0536ac0d933683dda75887458a8f5e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-ova-proxy@sha256:73e026fdc5198c2fa7d39c6a5ac3cda8741fb10b492b083014ef5e49374afdc6 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-ova-proxy@sha256:1d387419834d6b65408e59848834fc76a8948888d31c65f2401162e41b0dfc88 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-ova-proxy@sha256:c79826694482f924cfa450ead6f96933be48e3b54163ca81786aed43253aabfc |