Sign inSign up
Strimzi Operator for Kafka

dhi.io/strimzi-operator

Strimzi Operator 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.2-debian-fips, 1.2-debian13-fips, 1.2-fips, 1.2.0-debian-fips, 1.2.0-debian13-fips, 1.2.0-fips

Index digest:

sha256:4176603b8e8791b15397c9cad09aed8fd49c84c54fa6bbb750009c43c621b057

Manifest digest:

sha256:7835323b0dc6a7e2f91098111b4fc8c15905fd5bf6d400992db3f23ef0596af3

Size

146.15 MB

Last pushed

12 hours ago

Vulnerabilities

0
5
2
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/strimzi-operator:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/strimzi-operator:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/strimzi-operator@sha256:33e0d527973901e5dd3c35fff2d1496cadfc5502a9e19821c97aed521e19380d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/strimzi-operator@sha256:c7e0ce7cd015852d4081cb2eb5cb092f7a7bd653c89b31f6ea04db896afaf58e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/strimzi-operator@sha256:4acf4cb332e23c3e593f31906e8ebbddb624dd6417aa2cc31924beee1488e6a8
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/strimzi-operator@sha256:d263c5d1188c87ad36d89660b0c27d3a3d5482103b5f312473c3d5b1aac64a4d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/strimzi-operator@sha256:5b93f9a4e908dbb8d8628ae8885a28a574dd58792e00f8ef266dd4c04e27fb16
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/strimzi-operator@sha256:528bb2e957974344954b7e52646e78a24592c8aedb3f8401b7293dcd74675ec3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/strimzi-operator@sha256:dba445eb5bfc179a75028cd6a41d6a07b49a6756a8a82b72dd9c674ef34ee2c6
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/strimzi-operator@sha256:c8236cd4d7e58772de1245bb273ece34a93dcc2c629b9b1df842e8bce93f22bd
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/strimzi-operator@sha256:2858de16c1d1f41a700a51cc91da64acb592ed2dc2e1c040e570a8b37b34fa25
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/strimzi-operator@sha256:701af994defc584045526df9e0fd7eac14859ea7aa893b082b20c0ed8c794b51
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/strimzi-operator@sha256:28807b0c2933fd1534139b4bafbb6946107e59b03e4924ff0b6618673c164256
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/strimzi-operator@sha256:f4ea1a216b323e00e9fe4553130421bdc8e4f1095dc0b654fca30ac7c9bbd2c1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/strimzi-operator@sha256:7b8a6b8e6db0fa42abca8d8c79d41695d41dec47f0af182bba8f963c793898b3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/strimzi-operator@sha256:eda898b7904790fd911ab958995408daacb01f15bbdfce8cf5712a94f002d665
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/strimzi-operator@sha256:ed0f28c03f73e7da4b6b53f78eed323703b0bb3886f81acf54fc747d8b3b78a9
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/strimzi-operator@sha256:896c54d18b6a254a89326b431401a105f9940435a9c9d45be9cb387de06cc9c9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/strimzi-operator@sha256:24f3e80f48014a66d9783175ce0637cf5517b2f1cfae3bc63a063f55233b057f