dhi.io/populator-controller
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.12-debian-fips-dev, 2.12-debian13-fips-dev, 2.12-fips-dev, 2.12.9-debian-fips-dev, 2.12.9-debian13-fips-dev, 2.12.9-fips-dev
sha256:9e871f7162f5cc2e3cdfc96a2207574d4776898123541c6bd337b6205897be76
Manifest digest:sha256:f4bfd20ad89f9f88346719be03c16963d14bf03c5fd7813fccfbd24eb2dd2bde
Size
50.32 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/populator-controller:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/populator-controller:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/populator-controller@sha256:bd2cb693a814012fc70f66d2989d315acd50935de4cd1f859f9502479621bb7f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/populator-controller@sha256:871c655ccce7e349e3ac14e2cb7267e543d058e52e7c99423fcdb86cafa1245d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/populator-controller@sha256:903c911569cab136c0b1db393896391928480b0dfee61762e0b47847bc073cbd |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/populator-controller@sha256:de270eeabd4604779e8b114494788d4192e41ebaafc320df0d59cde1b740b8bf |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/populator-controller@sha256:dbd76add83c6a692ad2c78cf23a54348b81e4af1f6df1b02de118018798c21d0 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/populator-controller@sha256:c08575e96e4a53dfc464f67df35d68dbb84dad1fd745ca2ff2b03a72a35aa211 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/populator-controller@sha256:682afbc32f79bcfcc2f11a730246d5a7e68a2d291a15687ab3e3250d1528b526 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/populator-controller@sha256:947b62185992a926d34ef6b3bef5fb1784e64d1db8c0393f5eb52741fd667673 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/populator-controller@sha256:7bd9d06ab95a1f465cbd6ed0faf3e0dce425f9ae1ea0518c730bc69838aedc32 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/populator-controller@sha256:2a6d974a3955e75ba8a0f440d52065a4640d97dcf28ce01bb931130b0f05064b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/populator-controller@sha256:3319df7fa7a44149ce471d87a4bc9d3223e9afd24b6ee398b20758234aaf47ce |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/populator-controller@sha256:bec6b74b19d1b9aef5b9e2cf017daccd98a2b8690c9d804b61bed105d215336c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/populator-controller@sha256:497150f195233de763c5f2a0a63dc5a5ffc0f19772682e974cfe404f156929d5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/populator-controller@sha256:b8f35eb06d4ce50bad9cd8b57edb72777d4b5e35b499b616ad394564ca6a422f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/populator-controller@sha256:026c9feacdb904b6bb2363198714caea35c5552d1266924114c8b3e5106c8f23 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/populator-controller@sha256:2aef4fa842fce14be55755478f93985e796bfcc26fcacf27fcfbb88ad6c617ab |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/populator-controller@sha256:d6eda8ad329df2b3643dba0014e0e76d73c0877ba4b12a7532a11f9464c0ca15 |