dhi.io/cassandra-reaper
4-debian-fips, 4-debian13-fips, 4-fips, 4.2-debian-fips, 4.2-debian13-fips, 4.2-fips, 4.2.7-debian-fips, 4.2.7-debian13-fips, 4.2.7-fips
sha256:c5750fbfc765ac28d676132f5f00f041b47818d5f728cee556047b2cc27ceab4
Manifest digest:sha256:4c5247e7469912be45babd9143af4e29439d4866656721038d55edcc412dcebf
Size
153.38 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cassandra-reaper:4-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cassandra-reaper:4-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cassandra-reaper@sha256:a35fead01d5b0bbf18bee4dcb0cdb4dafe701d45977f71adae443eb53112e3ab |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cassandra-reaper@sha256:ee6e143264aed7c6a8ba3fe11b635fe922616cb8d67389b853913385b5bb0c43 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cassandra-reaper@sha256:e4e22d756d293c974b64f3ea162259c376374367e427c8751d14c952a8664130 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cassandra-reaper@sha256:aedfde765f7398e676a31f87b0a95dca20d59c01548096dfd6df917f46083b96 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cassandra-reaper@sha256:d1618853e3ebcdb4d9ad2146c2f5f75a152a32f21378983f8002c5a01679e7c0 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cassandra-reaper@sha256:9a610ba5f20d2ca27f51cd26dc8b02e5946d6a65847f9948b09e06b9b5fe10c0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cassandra-reaper@sha256:c6dcf37f551841fbccee90f9b4857fffd7b9ab04fc2def2b71032c0e7d9abbc7 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cassandra-reaper@sha256:5f21aef3fc409e42767445678a0e3274a64ab426843b92fff3de792e0ac61dde |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cassandra-reaper@sha256:9547b3514f79bb594d12d34d269ce3b75ddfe43a41023680542d277d65206653 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cassandra-reaper@sha256:2ffd079198d20a2df0a689f884c9934893480d50d73a9651307b928022a98d3e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cassandra-reaper@sha256:305a027655323783226c90cd16fbdd348abd17e6cc4b001b0cca2883ba15786e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cassandra-reaper@sha256:0df115a13d3caffe014e94c6e9f39d0856971a1c91dd2d0d772bd5f5127bd8e1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cassandra-reaper@sha256:18be0ded16f910bb42242f2fec3e717171c79fe38c00c13497418a135e6a3a07 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cassandra-reaper@sha256:44ef7a4d09d2b0aeb9edc3ec29ee1b9dd170919ba013605bb4b89f55ecefd398 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cassandra-reaper@sha256:ca9f9be4e9b2ff4a5ca1c7fd5143b4994be1f3c218667bf4168c437fdeb14c91 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cassandra-reaper@sha256:88f1601e3e9a71e597a3c36db0849bc54398c7227dfe0d29c19c2655f6de5bee |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cassandra-reaper@sha256:d121d0c3befc653df102f11bf9aa7817b378cf2218c5007a3494c151793c0ecb |