dhi.io/strimzi-operator
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.2-debian-fips-dev, 1.2-debian13-fips-dev, 1.2-fips-dev, 1.2.0-debian-fips-dev, 1.2.0-debian13-fips-dev, 1.2.0-fips-dev
sha256:400ca32da17aa28d92f4c2c0c3eb2c1160462d3e810718b8f5dc4352fb1bb983
Manifest digest:sha256:2e36eceb576b21571fb0d66695784f400b5ab0e86909eae8eb634bc2d0b081db
Size
250.06 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/strimzi-operator:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/strimzi-operator:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/strimzi-operator@sha256:a65c489fd1b4a643f55f996d48a992236835c2f29649d337796150321f301369 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/strimzi-operator@sha256:a57597e18577222c521ded438875e9715c81f2b164b81ae61be26bf0fab3be19 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/strimzi-operator@sha256:de11a5ac48caef34b1c183138b7a36704eebd4ea687017cc5f32988f69d88122 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/strimzi-operator@sha256:1863f74d845faa9ea588295c85d01ec426582b929e9c3a14a4627ec8b9ad6cc4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/strimzi-operator@sha256:24fa32b54b515c99a64457a9fe123216d63ade4d5a93147135d9e0571f32f768 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/strimzi-operator@sha256:e915e50f4ce970abb65baad6c894a71c4e95de7444ebb2bc24a9805f4ef8be46 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/strimzi-operator@sha256:458e2ed72c0553accea86db83697dea4a0ca873b0a4757d29fecbeeeb6d49a1d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/strimzi-operator@sha256:e6ec7eb7b261188800055f4721a1b2d3d5a439ea6f4ef52fc48b883beb9eb4c5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/strimzi-operator@sha256:6a9334fbcdab14dea2bbbab9719cdd20b88fb778330f32965a364ff5a5319cc1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/strimzi-operator@sha256:9504292722e20c1b43010cae08cb6b0fdcbfcf9dbd925cf1f8c8c90d77310b83 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/strimzi-operator@sha256:531ca816f1b800512fbe190a8b946d369f3d91c837fd0a7849dc53b2acc98a14 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/strimzi-operator@sha256:5ebedc3be3046406caef5582c725b7a7e2271e79055a401b774e755e03520fa9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/strimzi-operator@sha256:a3c6360ff8b8320f80960e3a549d34afea5bfb8383f6d24a49ddf8114317393f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/strimzi-operator@sha256:fa9ebe73dd9b87ea60734c3ed547631c5cc4e69a6f5ac77bc96868b97a759413 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/strimzi-operator@sha256:abfb1f6ef23fc954fe583a96e5a92a0862f461b0907ef4d4ad77260f71b59b99 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/strimzi-operator@sha256:64953eb4be76db578179f0b9a9ecfdd02ed2a3d40c9d9ca03ae67d4ed8b58d3f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/strimzi-operator@sha256:b1773d467f2fa2f7777c62b6135ae7843216f4ff711eb2fcf793d6b4c6e5452e |