dhi.io/mongodb-exporter
0-debian-fips, 0-debian13-fips, 0-fips, 0.53-debian-fips, 0.53-debian13-fips, 0.53-fips, 0.53.0-debian-fips, 0.53.0-debian13-fips, 0.53.0-fips
sha256:f2d9bc74771c69473100373627ee27df65290a8528dfc74324bded77f63cbb71
Manifest digest:sha256:79647324240698cc3a9297f11b7528517240a1c9cd99728ecd88e8e83167d01d
Size
19.88 MB
Last pushed
4 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/mongodb-exporter:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/mongodb-exporter:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/mongodb-exporter@sha256:42da1a6d1a3d291e311074754fea4dd027cad27b876cb51511207a116653e7ca |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/mongodb-exporter@sha256:bbbb2501f9714a957c37b8a4ee7495b75c87fe492e462aba4895ca606231c110 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/mongodb-exporter@sha256:6c1faf2695b44cbf1d1427c14374879713f70ace5342d5834594e57bac902799 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/mongodb-exporter@sha256:f4d19dc9caaabcdd5bb6009ebb6a56b07dd4d26ed29f13ad027007f0b1557019 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/mongodb-exporter@sha256:7b435c8da79deef7945221018ea0a56485378b5d2f2e46aa17c1f0a6e53db022 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/mongodb-exporter@sha256:4d66402a35abb3aa47c93d793ab356e9aca6f6f486e20b2f952f6678bcdab759 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/mongodb-exporter@sha256:c23e55229498f01584af85d9ca4363556e8fe702e387c5909858e68b3c04e0e6 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/mongodb-exporter@sha256:a17508a239e3f67158396e864f06b59cd30840f54e7b604ae15e3a895dbf0203 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/mongodb-exporter@sha256:d40e4c503e1a0d4b5f16f72216677986cd6f97ecc1dffeb3fae6d519a1e28b7c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/mongodb-exporter@sha256:394047ec8bc68978873185e2d2de02cb32fd0d29956306a11b33af852982bb04 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/mongodb-exporter@sha256:d09cd6673ae6182e0d8e841f1b5ba63612936a6a5a5f0c59b5da51d58d3f40b4 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/mongodb-exporter@sha256:9f84a4f00a3981b0063e119473daaf003e23dd5a6e7af028492fa5979cd01ffb |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/mongodb-exporter@sha256:70e2eb1753c904f17d1bd8cc4a4c4ba44942ebbab6cc3b1076d31f31a7490b33 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/mongodb-exporter@sha256:f64d5888c0fe6117dbe922de194095635a3c42bc6f17e95f9eada3a8c3adbe0b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/mongodb-exporter@sha256:e8466bd8c8b6f6adc1697d9e53bbe6cf8ec3ab0e6adfa3007c0c8531ce6a0dfb |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/mongodb-exporter@sha256:2c1ab35ebb8e537e918124e821934084ee8fc88be0dd7ecfc9116cd52b65d8d2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/mongodb-exporter@sha256:4ec2260e1202bbac42bd82e8fb40337367756cf4e880c39e83559c92d5625b43 |