Sign inSign up
k8ssandra-client

dhi.io/k8ssandra-client

k8ssandra-client 0.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.9-debian-fips, 0.9-debian13-fips, 0.9-fips, 0.9.1-debian-fips, 0.9.1-debian13-fips, 0.9.1-fips

Index digest:

sha256:9b188cf6ad8fe0a2792d9372513a608baea0a875d1519c1ec3d16e91dc8cea26

Manifest digest:

sha256:7e96283d4d65ee4e1a8362375e2bc6d5874991e69914cb4932f2aeceaf7ce937

Size

61.06 MB

Last pushed

11 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8ssandra-client:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8ssandra-client:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8ssandra-client@sha256:5632818097297b4f2c6ba89bd1ad6e8abae83d3f139e5b99ac7d3f5ce6bb0e88
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8ssandra-client@sha256:ef140d631b8d5b2b224cfc58b0dfbccc12db7c637cd156eb02edf6dbaa2c323d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8ssandra-client@sha256:492edc9a9b7188366ab724dad04938395309da02ea32c1c470a26c9a5165de04
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8ssandra-client@sha256:679f809b543b18df4f351a6993ab3d0450b69088280ea84326decf4a02414765
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8ssandra-client@sha256:8860bd8a76e065d68d92c49ab0958f42d6a8879578ff7eeb3b2ac8e0733f5c11
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8ssandra-client@sha256:f023a81fc9ef1e9ee8e9f3ffcf76de752b4e66348839b7ef4518dadf48741a22
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8ssandra-client@sha256:0d85071bde885afec5be27beb1b369954b879ef5aa711542a91c0dfd5afc22d5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8ssandra-client@sha256:99e5d23e4d49af97248ec15d915153f62db8a2c0d188cdf0c9193165f46592b2
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8ssandra-client@sha256:341566d8025746586fcc0ed6dffa7f7f037b100ee25900dbfa620aca8994ad05
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8ssandra-client@sha256:ade44d2e9eda0f66f370f0dd8c79859c7e734d1812530d762e5af136e9597b0e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8ssandra-client@sha256:6c14c9ab2a9125b06104a7cf2b08d7907c538fdc9f520ccc21acf3bef86ce018
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8ssandra-client@sha256:62b38ba47ef6591b0da6918f4bf6e810686bf1597b19cf40e4286a5a16186dcc
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8ssandra-client@sha256:56220d24d423b357e4977fda8d0e33b10b675761307c5735105dbedee67b4f33
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8ssandra-client@sha256:efff1c025ba6e9179b65840df58e4526923c711eb205ad514209b5c006520a2a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8ssandra-client@sha256:d086500577808b71287201f04e1bedb8945b40d0b56b24faa5dd6b6a6b5cb64a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8ssandra-client@sha256:58d2b0d53cc3b1f53b9ba5b6e79f98796d580679e7b2a41cef4a6c9685da05bd
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8ssandra-client@sha256:a1ee6d31e5f4c1ac9f4220ebeeda782b6ff6392b2f7869c431a14253eb64511a