Sign inSign up
SPIFFE SPIRE Server

dhi.io/spire-server

Spiffe Spire Server 1.15.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.15-debian-fips-dev, 1.15-debian13-fips-dev, 1.15-fips-dev, 1.15.3-debian-fips-dev, 1.15.3-debian13-fips-dev, 1.15.3-fips-dev

Index digest:

sha256:d743cc523c82c20c1aacdddca2cfbb1f74a074dfcbd0167d121813867afa5d27

Manifest digest:

sha256:52e289d89b66f68b2ccef488617e6d6028fcb7e1ebbb9e1912369e296f75ad01

Size

90.51 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/spire-server:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/spire-server:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/spire-server@sha256:543e5b133a7baac9e2785d157cee66cc1e15a321ecefda8ce6159ca58a901182
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/spire-server@sha256:451ae3ba56e1f73c7b6d11c001839a0386cc687c4fe5de17bc6ac06d8522c49e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/spire-server@sha256:7c982b7dc172a1133fbade930b6c3a777004ab9d46d905b60825264747958c8d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/spire-server@sha256:15a5644632c82e85f7bfcdd79cc1479edd0f203f5b534fa9fc906b720ecfd27f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/spire-server@sha256:2127dc3a887893981352d6426c5ba73d67ee7022494269cbff60acab43c42bb5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/spire-server@sha256:e3d707ac1feecba8fed7385a82c5bdec38846918938338c4becf84ce24ee5069
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/spire-server@sha256:d5e7f88ca3137f9d7ea7d092f3070fb35ddff590f6a94a3da94a5eaceb265acd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/spire-server@sha256:3d41cddef809e5a28c6be44d5468ed049ef10a22c3986c8f8acfe5fec852a857
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/spire-server@sha256:0c769ac1ead2b4e344067f0667fe2a606eb1bfe76aa8f00c7f0419fac1138c5c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/spire-server@sha256:8574931b32f6c497c41d9f073d4cc3394d01d032190353b6dab9375cee3634b8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/spire-server@sha256:8856a26c252da0b73137629f72761a1698752fa50569084afeb2a5bda916d5ec
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/spire-server@sha256:02365243561810a5f87ee1d7f91d4103cad07b200fd70efb22eee30d84d528e1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/spire-server@sha256:09f18a07d15d57186dcc94474734c22f3bd1815e8e50d38e1774ed4ca1942712
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/spire-server@sha256:4ca3bdaef6f7168c158f8aa9d8c8889a2de417b661e17e9f778a53ae6b4165b0
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/spire-server@sha256:072c92ea359f153f2a523ddaf0f426ae5a87d8be87f3425344f21ba3dc304bb2
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/spire-server@sha256:52fd0e632e4e3b4b4d4329cf98c16b51634f5a557924ea0e2f40fdae24884e6c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/spire-server@sha256:3857e4c131f6f5e8956202cb155faaf123dc647e571e2b6f2aa45c7c7b74997f