dhi.io/metallb-controller
0-debian-fips, 0-debian13-fips, 0-fips, 0.16-debian-fips, 0.16-debian13-fips, 0.16-fips, 0.16.1-debian-fips, 0.16.1-debian13-fips, 0.16.1-fips
sha256:068581a781036ab3cb469230f3eb52bb6a6ed7983be1e15b4411356ad1dd1eae
Manifest digest:sha256:b0150d145942628500529ed12f7bd5784fed34a5632e6628670c2a5f52d40ab8
Size
24.92 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/metallb-controller:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/metallb-controller:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/metallb-controller@sha256:c8a6cfadb918c788efbc292fdc247039f5dc6b66c476f49bdd41556923d446ae |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/metallb-controller@sha256:dd12a742053b895a2889f8cc0724c5401495d6c195387981d5e84a09984bca68 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/metallb-controller@sha256:01cbb2e67667f75f2ddeb484e99069e3853dc7424f11261a25cd504a7e15083e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/metallb-controller@sha256:735eca9225d2257310476e47a916bdf6edacf22a18056aea7a61835001ef2ec5 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/metallb-controller@sha256:0dc041e81b9650870024a4fdf43946fff5119cdc455b931bd7d59c99a65fb534 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/metallb-controller@sha256:c8542ca49fb28fe4f1ea6bcdc41bf7a1608c49fd349c8ff2086a4af9d03513f5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/metallb-controller@sha256:a1984970d99bc13af1bcb453bc4c09e18b5876fb28b31c1e6613eedc81fe14c3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/metallb-controller@sha256:e69e8f5242318972442d7ca4e747a66ae1a0a76a647a6e049de59bca341b8794 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/metallb-controller@sha256:ca42491656b6197d4b2de39bbe81f6e5492a51565313f071fc862d43059739a5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/metallb-controller@sha256:4d8d147a9663d580be48ab0231f6c6c54e002498ddc69585ede1eac466b5bd5f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/metallb-controller@sha256:a687f2e30834a4caefa57af3ac8966a3e1b4e0dfe2e02f1caa4d94fb4a3e34fe |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/metallb-controller@sha256:1cc794e4414de74cdc6f47e7622966635c91e43f5705a34fdf22eb940a477e7a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/metallb-controller@sha256:20d8fc6bee72815692a0b5e02c0c8aec3e90244cfcb4d19242cab312d59f15c9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/metallb-controller@sha256:8282a42cc866d475259eae41b7607e962dd2b2540b920a997f5d20a39340b948 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/metallb-controller@sha256:0946faf5e3b9d31a7e3ac33b4289ef4d7ac23466a7701ef49705a2969694b9d5 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/metallb-controller@sha256:bd850b308982b25cb889dbd525e5dadd97215f88f54a1674e65e9bd9f3144108 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/metallb-controller@sha256:2009a0f868282bd6f9563e5e292f3b0295e43c8d50ca763d14a926ef237e969c |