dhi.io/forklift-virt-v2v
2-debian-fips, 2-debian13-fips, 2-fips, 2.12-debian-fips, 2.12-debian13-fips, 2.12-fips, 2.12.10-debian-fips, 2.12.10-debian13-fips, 2.12.10-fips
sha256:8281fa96cf1b7f4c32e496ffa4072500fae87972340d5129c887677165d86740
Manifest digest:sha256:d2da1f294a517ac592bf40c5c25d297478e9fbfed0a36a023736077a1ef9bee5
Size
315.28 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-virt-v2v:2-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-virt-v2v:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-virt-v2v@sha256:b626288ddecff5497b43871c2b5089aaad051fbf0046ead9fa1eaf528bc1ae53 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-virt-v2v@sha256:78d6b5b5cb628ba08a1d57e82d395ebfc60eb33b5964cb38aad90fea80114ec1 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/forklift-virt-v2v@sha256:260e8e98b9f0a6e3cfb485f09c6fd41073797cf88b87855cf426debe7872328a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-virt-v2v@sha256:4f2abcdf937721a03973eaba72625b60acf06f9aaf7aa1bee13bbd4f9c334732 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/forklift-virt-v2v@sha256:f4d259ac5328a48fdcbb81c8e2469d140ce68170dc8d75a45620bed323a03165 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-virt-v2v@sha256:cd7d5f0b746c978daf6cf5be2d4eee65f23292798f72f1357c590fa7daadf176 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-virt-v2v@sha256:60e65482b4e0700b6067cb367ef6f82403fffee54d2611b11863e47e1971e873 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-virt-v2v@sha256:ab2ceeae6bc8c5c8845e0d286f4dff8607daf17682362be4209ef9960d07732b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-virt-v2v@sha256:a59b5b52c3a7e27a19da9ff4700c3a12361e58ba2fd79d7b1f3d8971ce60865b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-virt-v2v@sha256:403257280f8fb3dfcde31268160065c2c886b57e9fe9e9d339cc20c97d46e793 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-virt-v2v@sha256:30b9df31a03e757fa5c6c4564eb2cfc17e80e1329354a0ac3af1b56fb06900fb |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-virt-v2v@sha256:fad0020ad946c79fe4f735dbe7bc759d16da9fbe8b1bf64ff605d95b3bb1d807 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-virt-v2v@sha256:01eabd6c35c47bc2594847c7f3df137de5f9bf530f60a03d08de038ec21a33a1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-virt-v2v@sha256:a1a91480e6a09aa5babaf26f328f8383ccdbf370c6536e12d4f802b98564ea99 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-virt-v2v@sha256:8b5fd54f77ba5f386a862510af05dc5b8bf598935fe4e0828285fd9f01e439e6 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-virt-v2v@sha256:de05266b5ebda0e52f9b55373e951bd0e403609c8ed3f083ad28c3386db27a36 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-virt-v2v@sha256:303a5e9a6cdd6ee4b82e461bf0c7b3228e1aa8073fcf1ef4b5f5cc86e1c25cd6 |