dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (dev)
3.3-debian-dev, 3.3-debian13-dev, 3.3-dev, 3.3.1-debian-dev, 3.3.1-debian13-dev, 3.3.1-dev
sha256:ed38a65eb1b5dd35ef11cb69e49992eb2b854f6f545c1652ea4ec34eab435b7f
Manifest digest:sha256:2cc3b87e9c5b1725f8d213913eaf2a0eb36116024fcd2091382359529bef5892
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:5be82b9910e54efbbdedd23f54c98e39e93909252eea405fe2c3b2bb7d69060c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:498be508ddcc6bcedcf2bfd173229dbe12b0e6e94c40b4bb6b90bfbc66b047c4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:ff3162740c027d07ff68d6eb4b09870eb763f1261a40c6c430536b35c4985af0 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:a52580a188091c9dd0f2ce16a6b9ff67cc0019a0b2ae3277dc2a83adcd6b6887 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:dc110fbe67748aa0526a09a1da813e91b648ae6cc143fec7edeabda870482c16 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:b3383c742a4088511f0dfc9e50c902f1056cd75c946becdd31f5bdd5eeab86cb |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:193bc3369617c949c153b778b19ddd7de6afe0cb58cc596a3690f63b60999b60 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:38100b6ac6fb962a28f2967c825bcd580113885d77bdb0c098101c37482c2ac4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:62d60d8eab1f5633cc738c5814dee51c41848f6bb0be191a9042d960a9846d2a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:ca5f3cacbe60d6e22b4f64db15081ad7f3a1dfefcac0de6e2e58a6cab6ae167a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:d7c4ec6182fe7f5d5156395b472163e59002f8db4095204e834d35956173a162 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:6ba7b42124f19dcb55efe1821998be9fa5eb659cafb21db65f7752bd70c379cc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:a2d77d31ecc1bdeed92e49bbb7784e7a73945ebc8cf48edf1ce3190846c43142 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:704c3ff5dcb29ba80e016e1e3f4c9447bf4082477ceaf0d52ac2aa27f9f9e985 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:3890ad40b88fd372f2b08244337a709cef95b39c4fa78a86fbd75b3b246ec940 |