Sign inSign up
Strimzi Operator for Kafka

dhi.io/strimzi-operator

Strimzi Operator 1.x (dev)

CIS
linux/amd64
debian 13
Tags:

1-debian-dev, 1-debian13-dev, 1-dev, 1.2-debian-dev, 1.2-debian13-dev, 1.2-dev, 1.2.0-debian-dev, 1.2.0-debian13-dev, 1.2.0-dev

Index digest:

sha256:6c06795bb433934429f2f38e7d489de7a3a51c7365ef199e4d1f93678ee02310

Manifest digest:

sha256:b29bceba32cc3fb09d21f29443b57a4e0c84619f0eff8eb738b2aff9579979bc

Size

240.34 MB

Last pushed

8 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/strimzi-operator:1-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/strimzi-operator:1-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/strimzi-operator@sha256:c9d72404cee473028f09ea057e0dda8a0d449389fc0f650340a8e642069b0ab9
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/strimzi-operator@sha256:720e7cddb574cd0e4ffcff0fc6421dd0c927b770c50aa22930f663642e087375
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/strimzi-operator@sha256:981396a33af437458a2bee91813362b8878c95e05312c80cbae7e61c22c7b9ed
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/strimzi-operator@sha256:22e0cd598b838688b79ed16670d0acda6be291d0a223b44f8978d7663ae76ba8
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/strimzi-operator@sha256:eb3c92a93e77354c5b81b13e6915f6ad8beaaacf1a6cc86a7016b673dd69d0c0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/strimzi-operator@sha256:9df60ce1e7b040d2f690709747839d8762706f7502091bdea5025775e6c5ff1a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/strimzi-operator@sha256:4c965f630610378d93d6aa004d0989ca8667017846518c37bacc184cf8244d81
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/strimzi-operator@sha256:a6e08d2a378c0d680393536dcaa59b69b2854855e6a952e4f9c41b380650f34e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/strimzi-operator@sha256:0df4f31b5a62df98c3df015e46d67c1bf1c2e916b99d0727bb44f53631f5f4fe
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/strimzi-operator@sha256:ae048f6b38ee2614d9aa6a67291d848d1ee21fc052b3645e68d21d0d68ffd69e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/strimzi-operator@sha256:f374686019aabd666bc1fa967fde673664c877ff855944f9ff1f1f7a7bc8facb
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/strimzi-operator@sha256:0e4c569345e02248df2ff34f47ef92b5d6f024953d9909005afa24b0a4d26236
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/strimzi-operator@sha256:6f1790218f9333b76cd5b74884253e0b693b200d6a2cf5f5a2cdbf183cb9e06a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/strimzi-operator@sha256:a9b195b7beeebb77ea844b2ff849fd06b0b7086ce2861084111b42ac8b6f60e5
SPDX SBOMhttps://spdx.dev/Documentdhi.io/strimzi-operator@sha256:218ff4c07d00a6c790d888b26b123aa4574fb1d5e1b92d393f3b943c172f034c