dhi.io/calico-webhooks
3-debian-fips, 3-debian13-fips, 3-fips, 3.32-debian-fips, 3.32-debian13-fips, 3.32-fips, 3.32.2-debian-fips, 3.32.2-debian13-fips, 3.32.2-fips, v3.32.2-fips
sha256:89fce3ac6ce47630497993cb6558cee1447ff776b0e33241a4a20666eb107646
Manifest digest:sha256:e24bcf471a0af7cc05704f9ff40f0f27d4cbfcd6d2cd8a0f56ae640598dd28bd
Size
23.36 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/calico-webhooks:3-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/calico-webhooks:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/calico-webhooks@sha256:81ea4a2e09c4928a89c13444b782c285b121644d10857984d6db5d265742480e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/calico-webhooks@sha256:2f0db1bc44b7442cdf622e013884a7062760d39acae60b1d3335004ca45c26e0 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/calico-webhooks@sha256:addd8b37835df6f6c60b91f8d5064462ce2d2eb5d8f1dd40cb6aa4b9a43e374c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/calico-webhooks@sha256:8f86476b69faf201c3177ef850ca450e2e6b24384b1bf408a4c5e68b51cb617d |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/calico-webhooks@sha256:dc4215251ea46466e8897c7ace83b524e197b54ed6a7a0b392a5838106e4b3bf |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/calico-webhooks@sha256:70ec91b9f9189d2b51391f93340892c08d80fa2da083a4b111210c0a06a17fae |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/calico-webhooks@sha256:78e2cac3fb4c34a4099822b8fd31ebee6d12b2a7899bd9d4fc801fb78718ae86 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/calico-webhooks@sha256:e59d9280d46a0b080de69884d2ab856309d5e4508dbdd9d2cfd8b46b81c5df28 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/calico-webhooks@sha256:cf7cb49a7bdd275f2946a4902897b6db90bc0ddaf5ba0e4c82d116da3475ecd3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/calico-webhooks@sha256:b79a4d605cc19ff4cb7df17f4dcb80f475ae3a8929c9766a6b221d8ff5591106 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/calico-webhooks@sha256:551860eb8510258d8d277c5f49f0541ecadb70c9a84214441b9765a900dd124f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/calico-webhooks@sha256:014be447996f9cec96bc1f3939f2313359c98c27fe333b46c5f7a4aedd43a78c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/calico-webhooks@sha256:429bde3ae07c3646760654ef5acde06fac570f1d05fa3b426d643fc6499a50b1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/calico-webhooks@sha256:f8cccc2ddf55ab10553ab024d294864ad7370bc7de060bc9d4e6e46c9128990b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/calico-webhooks@sha256:c9b2b1c82bb733d47be4bc4504b8272ba9ffe89cfc79e8429e3f497110a4f76b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/calico-webhooks@sha256:f5c895aa8310472b99fe3c64d4981240e8a6caaef98991e3b8a3fbbd396a0f35 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/calico-webhooks@sha256:5296e81078a48404cc3b9197fe5b0aa87ffaf7021d85677aa0112bdc087fc7db |