Sign inSign up
Argo Rollouts

dhi.io/argo-rollouts

Argo Rollouts 1.10.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.0-debian-fips-dev, 1.10.0-debian13-fips-dev, 1.10.0-fips-dev

Index digest:

sha256:20d5ed1df402de95666e98dd676f5fdda30ea4c2f7fc0938cea8b919eb8f8e4f

Manifest digest:

sha256:946e07f529154650f2c71ae6b46d9d876a01ffae2a1bd82c5668ec4491935e82

Size

69.66 MB

Last pushed

20 hours ago

Vulnerabilities

0
4
2
2
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/argo-rollouts@sha256:19248cdb36ea039e16b8c55aac3b98bf678809c299798313ada55b1766632e42
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/argo-rollouts@sha256:249964672469af968ac06ee2e320b8e8646986bfb171a769da4295da9a73a93e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/argo-rollouts@sha256:6d109d8aecad1f04778742d4be220722f1ad572aa96ac66c448bf1a69ed6125b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/argo-rollouts@sha256:45e0338a9afd558635a79d9f4df66bb545ab3bec48c444665711807aa69ee3bf
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/argo-rollouts@sha256:814c95fd95c5870a5cb1f7f02c770b8b17592113dca664a29bd70640a9783ee2
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/argo-rollouts@sha256:284ae1e4cbb9bf872dbbf7bcf9fafebb049d88aa544efcdaf8612fd0e08baafa
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/argo-rollouts@sha256:c603f40af30227847916de7b0ae295ad749867834c212d82864ec400a59b1b4c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/argo-rollouts@sha256:6161ccb6b31d96eba7812d395be229945669ee34a52611f05f35f969693c2f0a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/argo-rollouts@sha256:f7d7f3123931e0bd167a34e791e0eda01425ddf5b29fa1287a51d1645d144d44
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/argo-rollouts@sha256:265bddb2e692766de66ea716673017a8d0393e8fa804f601b58f57c7e6f210f0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/argo-rollouts@sha256:6ae7c77532a382e8e77fc9b304a679812c2271869bf43433ff9f46612ce092d0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/argo-rollouts@sha256:75d178e96fedcb837f1ac69243aafee4da75c881a15080f15905591882a53862
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/argo-rollouts@sha256:c44901c83b940a610e3a322d9a1be7cd5dd475c543e2f365028fcca1952fab28
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/argo-rollouts@sha256:b86433836ec5e4f50ae3643c85d59b253d752925ee5ec51807160028e9d5f13b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/argo-rollouts@sha256:93c3a79e1740a2bfbfc204979fe498368d015e23405528062c3ac71572e6333a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/argo-rollouts@sha256:7f675adb16206f959fd41a7a77172badfd60c3ea87f3dc76549086b774d92497
SPDX SBOMhttps://spdx.dev/Documentdhi.io/argo-rollouts@sha256:bc54b4c37e436c1c338916a4384181df079c922899f2a166bd873b88ebaded43