dhi.io/vsphere-csi-syncer
vSphere CSI Syncer 3.3.x (dev)
3.3-debian-dev, 3.3-debian13-dev, 3.3-dev, 3.3.1-debian-dev, 3.3.1-debian13-dev, 3.3.1-dev
sha256:75228f4c11880a5481298d4ecc75d47d861bcfcfbf5ec44f6349145a5ed13dfc
Manifest digest:sha256:addaf91e6063c7df14c774d5a5df82a06d3257e65627210107342a6c0b1fcff9
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-syncer:3.3-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-syncer:3.3-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-syncer@sha256:74b88cad8d974c47a1338f08bd8d4ea8aff67e12143805fed6baa61e0448205a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-syncer@sha256:c4bc0571dbecbff149c55a0df3d1994cb4ff6315684b8f389e171da3b3865182 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-syncer@sha256:dbda68dbb1bca46ec5ecf8fc87fb077ff67ac2b3e9f36a121e7561c9e1716c28 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-syncer@sha256:b06e751cf7846b6d3df0f4595475a514cf0410296a8fca9aa906d1588854b8c6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-syncer@sha256:ba502ae13cc145a7e66319341a32c1db323afd1dc7f92db338e8c86e487c2feb |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-syncer@sha256:487470b0ded5bbbe45ca4192b2cf7c196437ad2658c54cd71650ee8e05d0077f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-syncer@sha256:fc0c413746683d80452dad747bc56ed2a97f294f321590fcd12edddfc3f6aaa9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-syncer@sha256:8afb64e110354f49f82d002173a8dc55e1403177ebaf5c2325b7817fd8834083 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-syncer@sha256:fdd1491dcff951b1745ad88daa0538b52d543674d67622ea990210155afb68e8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-syncer@sha256:d1bec7a54a61b5eb1eb44bb015263a4df4c3e242560ae134bb6d647262509666 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-syncer@sha256:7ef18f268bf4acfe42f8fd1b9a6b43cc3ce3abf42ddb5103685f2498b37e3bcb |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-syncer@sha256:8caa029d849243b1cd32de02cac93cd5beb5ab23f3fe8c50052f9cd0ee40c613 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-syncer@sha256:3788d7a7c7b24bfa2c1cc56bdddf46892d0c211858f7e1caedbe475a14309e47 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-syncer@sha256:d418c3947454258a646589eac6ee2358dfc56721bdb554a7d1ff555db58d53cc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-syncer@sha256:85b090310eea55d70af39eaefe655550e8a75967aa79cab10f9768639acdf6f4 |