dhi.io/k8ssandra-operator
1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.2-debian-fips, 1.30.2-debian13-fips, 1.30.2-fips
sha256:74c8d1193fc4211c7dbd17b1cd10ae0902311d3d2d6f15f497fbbd58c1a8f470
Manifest digest:sha256:39ab730039ddffa536c4f4c33f1ac0b5e419f50e0d9d9ddef64981cbdd8b623d
Size
21.99 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/k8ssandra-operator:1.30-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/k8ssandra-operator:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/k8ssandra-operator@sha256:2250459479ff0652db898ad8ff00b6b4d43cd2e5eb2572e7199e4b4663ac72db |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/k8ssandra-operator@sha256:f0b4993b9409a6ebb32f646c74445498a89526fd15d0a9ff2777697442525c0b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/k8ssandra-operator@sha256:853814cf38c81ab04b32ef7d1775f5c924fa0fd31da7afdd1739edae489c8e4b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/k8ssandra-operator@sha256:e92beb17ab21e2e36f94ac6ce53bd51a6682f004b7d2082dbef3fdfa51059339 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/k8ssandra-operator@sha256:8f840eb074a1965983ee22c68d2d479f56d5d0c7ea9f7523e2cc4cbee0be0c9b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/k8ssandra-operator@sha256:784529aec568c9ddaac6dcbba8b036625bfeb72f5f497aa3641f7a2ebdc2fc25 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/k8ssandra-operator@sha256:54437ef543df339bc72f5313701447ee2edf38e09eca85fcf8725bb6971cfb50 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/k8ssandra-operator@sha256:60393ab297a1557c3eecfd5556a56e23c97c0a5460bccd04fc99bd87016ddcf6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/k8ssandra-operator@sha256:b51fef9080308ec3330753a5f5039b39c804e5d70bc88898e9820ce469c3be48 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/k8ssandra-operator@sha256:544da797fe18c3f8a0d7a3692d7accf33b5295a946bc431d258aa4e77bb8e34c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/k8ssandra-operator@sha256:b97725c8f2d3575b62d45cba29db2a2c1113cc517816b785d13f9ca292ed2d53 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/k8ssandra-operator@sha256:8867cdf3905ea034bfd72335a341989cd876089037e5e8b6e9049c028d1f84e7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/k8ssandra-operator@sha256:56e4015546188e5cfd1a25262471d85f1c585efba7e2d85d4c599fb1d1a1b9d2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/k8ssandra-operator@sha256:b505952bd25a40a07a82306c6bd0d1f3f843ac0d97ae8021775c365d4f4f811e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/k8ssandra-operator@sha256:e8d829adc207274da4c991d80cc1243eda4bdd1e7d3751645d696f7b7a993293 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/k8ssandra-operator@sha256:c3d675b981b96794ebe8f1d7e4d165f0d40e37a2b7e802f7081b723ad32644e0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/k8ssandra-operator@sha256:16f8bd400e0c1692422a265ff6a76357be478755c5fcd9691aba20abd7733967 |