Sign inSign up
Strimzi Kafka

dhi.io/strimzi-kafka

Strimzi Kafka 1.x (kafka-4.3.1)

CIS
linux/amd64
debian 13
Tags:

1-debian-kafka-4.3.1, 1-debian13-kafka-4.3.1, 1-kafka-4.3.1, 1.2-debian-kafka-4.3.1, 1.2-debian13-kafka-4.3.1, 1.2-kafka-4.3.1, 1.2.0-debian-kafka-4.3.1, 1.2.0-debian13-kafka-4.3.1, 1.2.0-kafka-4.3.1

Index digest:

sha256:f3deff87ceb0253fdc8df3e4046f15a23d709279df6a8d53b65e5063b667daea

Manifest digest:

sha256:48b68eece182c92d82c274c85c55d174575bdd851553d8cef4d3d2ad99a7b29f

Size

293.39 MB

Last pushed

6 hours ago

Vulnerabilities

0
2
1
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/strimzi-kafka:1-debian-kafka-4.3.1

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/strimzi-kafka:1-debian-kafka-4.3.1 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/strimzi-kafka@sha256:e56bf29652b140a6458070362dca7926ed2da0425a256ce3dd9c61a657f0b20d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/strimzi-kafka@sha256:257d3443954fcf77dffb1c75fe7ae4832e0811386eaf2e94ab7e28c813ea1c16
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/strimzi-kafka@sha256:431f993839ab56047ac12e4e8d273faddfe8002ace0f8a57427e588df11ac521
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/strimzi-kafka@sha256:fd754b077e1eafb9db8567aae977965b1a1f438fa7874e17e514ac7763b7a934
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/strimzi-kafka@sha256:bc4b7843ccd574cfb7c2b96e7dd6aeee5caf2d1c3e9573d16f862e8f71d3c242
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/strimzi-kafka@sha256:0e8d73532d1b0e1547fd02c0a61860c5aab475a6ede8bddb5f5ecaf3a000b103
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/strimzi-kafka@sha256:57f6b7cdb43a3a660f3bc96dca9077d7e0372cc2c18755191daf303aaee270af
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/strimzi-kafka@sha256:261e3d607d756841cc0aa2323906c864e3a1cfc45a80e3318beed5bf77339f38
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/strimzi-kafka@sha256:308688997f1696cabd2c0c7757a25675de7b03db239d8033ba0df9f7c886cb93
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/strimzi-kafka@sha256:3649b0e396c512287fdd84a2c620b84605e40fc0616b42999f428438c9d24550
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/strimzi-kafka@sha256:06c6d2b2aee83211791b58a45a66c7a248c4c9d53f2d3f3175817b0460f0aa91
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/strimzi-kafka@sha256:590fe36adf4595037438e7a3e4c6b2903a8902b7f5cab517b6d84beb680289bb
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/strimzi-kafka@sha256:05011be6af76767a6ed6cc380315b6c70d692d00cab8457721c7c5d9dcc39ff7
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/strimzi-kafka@sha256:c36d5fa3a899f05d3b0d992fa037e01df7179a8b4560edc77c2aaba9151af3d9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/strimzi-kafka@sha256:fdbd826d7862a8ad502fd0fe47780cbdb43624d223af4071fcc93f19dfb94226