dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (fips, dev)
3.3-debian-fips-dev, 3.3-debian13-fips-dev, 3.3-fips-dev, 3.3.1-debian-fips-dev, 3.3.1-debian13-fips-dev, 3.3.1-fips-dev
sha256:0d529f885a87959bdad46d128307a22012c7b9e53cb944419ee2107f5b84da9b
Manifest digest:sha256:530471655dba2fccf3256f3b6e2edb2d4f7bc948510090a956903fd202996f44
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:89262f3bd3df5c9878da143c9717779664c79928c4ba2878c0edaa16cadb0c3c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:6f7b59de0d3540d0fe58d6ced36e00df6a7a1bba015a019e2ff04787a1f17509 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/vsphere-csi-driver@sha256:a2b9c382e25c8bb4b31fedbc0d254d4c1ceb3bdc31406660edb8e38bec5ccaee |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:0142b58dceab1a0f2aead66d6ec18da1c5f7b7d226ae6d456f410830e04b54a9 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/vsphere-csi-driver@sha256:83e4015b8eafea41c2c3d85a396b4e4064158fe20977927e96c5f1130209ae3a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:30cc96a29c8b42ba9310e0825510c669c9ea118b410e729f7707d7735aaeb556 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:977874e3d6856b4afa9ea592c6cd153d19e48177fdacabf70d21506918546ad8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:b297767739ea6bd695a339676c00a5f73ca8ec3e8c5a4b6e38f357c8ba8bb819 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:815cf79fc9b12f5d385be04f1fd5ebfaf8fe391f348d72bdee1e0e4a0eb4d2a9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:0e4b4323a63562acb9ed8dd344a4d384259921a95eb9df455a1ed68ec77a574a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:d3a26691092c28adf0e8246aa3bee592a499b30d7636acf926de4e0cc2b69b12 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:563e9949fcea496665377caae5aac12f5ae3a1a1d52eb2b2f8143acd6c575036 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:423c02df6b0195b99e31700e9159b331064cc1b5c4f5813a2f111a011e6dca70 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:8ba9112d993328c539e73c0a1b428795c511f1aac2a96e42ff70eb2329afc0db |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:12d0bc06d7e30ee9f29c8cd68f3e420fac6efae4939f250e95bbf1dedc47c334 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:0c7d472b9ce03c5dea2924192f24634a903ab30bd54990af815074049fbdea94 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:3b72bd1cb415d0e41d441472aa5ffb294f71556ba4e9878478d1c37928ac6a30 |