dhi.io/mongodb-kubernetes
1-debian-fips, 1-debian13-fips, 1-fips, 1.12-debian-fips, 1.12-debian13-fips, 1.12-fips, 1.12.0-debian-fips, 1.12.0-debian13-fips, 1.12.0-fips
sha256:b9df2e42ee7bf2706a8017cbbf7c0abf519634516ca0a14b39fc0b6ac48c52f9
Manifest digest:sha256:7fbcb6700b3d1ce34882003d3477423d063fb8178bcd73a3dda2f591233349c6
Size
26.35 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/mongodb-kubernetes:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/mongodb-kubernetes:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/mongodb-kubernetes@sha256:5660172e46901273708cf2e05dff42285f2ffd3c2543a9aa2fc36bf56e25e25d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/mongodb-kubernetes@sha256:e1c7074a99d80608a74280b7476ba6cce51da4a6b7bd45c021a05fbb19814af6 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/mongodb-kubernetes@sha256:f2dc42621ec57d0f855c34bf0bd41db805e5d6149f86bea05b2928d5b32d2a14 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/mongodb-kubernetes@sha256:34b8f3b8055bf251c2f66e4d35a10da6c5aee5024362d16dfbe32af3ee2f6198 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/mongodb-kubernetes@sha256:5c44a0618271701e55314a46b48af65945a3eb7041253d72feda9bad8855d45e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/mongodb-kubernetes@sha256:f5da7b1d1230daf315003b6d54d0470ad002802cd11a484dedf3e6682cd42d2f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/mongodb-kubernetes@sha256:cad74e8241dea73a8b2bb3f13afa71c9b95173330479472c40c254164bc35ecc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/mongodb-kubernetes@sha256:755b6bfcd2ff790c0e2a23592fbea60e2f5b534200f6d06507f79e8f1d6cb00f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/mongodb-kubernetes@sha256:b9702b55a5b2d1a7690c6bcd169e25674fa50ed6efe21d592e8577e7d426ae56 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/mongodb-kubernetes@sha256:3bb36f4aa6a413702d2ccb45321488e367bf55ed60e35a6ec50ab71f05c4e195 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/mongodb-kubernetes@sha256:838b7f4c628ede2969ad092cfcb6e45f431d6fa620454cf1f4bae17a40884699 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/mongodb-kubernetes@sha256:6c3bcee7ded00dc111fe4341b9068ed27886326a12183e433bf3f2e83b1b943d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/mongodb-kubernetes@sha256:afd489c8434366e3c3065f1f7bc3711feb48d58c39c127871cce4651a882118c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/mongodb-kubernetes@sha256:0d376ba04d2763f53d4112591bcaa8c3e8570c217d3453359c1545eeb91968e6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/mongodb-kubernetes@sha256:156de7c7b0082bc2f48c683f3b6c111f7c70efc9e2d50e72cbe1492c9a547b0e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/mongodb-kubernetes@sha256:dfc66617fca2255bc2a880d1f141ab03518f212d08aced0295330cc0808dbe70 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/mongodb-kubernetes@sha256:18cb5169b05e0eda7e3c9f336aa46dc887dae90256fd79d945a670f2f939c32d |