Sign inSign up
Dapr Scheduler

dhi.io/dapr-scheduler

Dapr Scheduler 1.18.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.3-debian-fips-dev, 1.18.3-debian13-fips-dev, 1.18.3-fips-dev

Index digest:

sha256:f1f0e09ea7350fcce82d88cc794c13ee4ab5fbbf3b621f6ce6762d0cd5445907

Manifest digest:

sha256:ede7d9a80420257d2f60c7f32fc335fee910062aeb0dd8fbe85c11a183e4df17

Size

55.92 MB

Last pushed

6 hours ago

Vulnerabilities

0
2
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/dapr-scheduler:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/dapr-scheduler:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/dapr-scheduler@sha256:2a4f7188ea52c024e36243ba53b89ebfcb85d028a78c9f409ee1dd6ea14f6329
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/dapr-scheduler@sha256:930541a60fd5c0a02d056468926cf7ea0219b07cc70d7a32ef5dba8be591dae1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/dapr-scheduler@sha256:75eba4135b5e17a621d4d9fc703cef31c604fb8388b910efd21cd2c2866ad5a1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/dapr-scheduler@sha256:636e87274cd88222cee154c8f9559606edda2c479b6a614db602fab53b943321
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/dapr-scheduler@sha256:c7dcc95b2cb6e6bac157b69e2e7a5daf19789816e26f407fe22bd30de8da673f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/dapr-scheduler@sha256:c5297e2e88f7b56765bde26113ba9dab417f5d9c544e944ff39ae28f3a3eb249
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/dapr-scheduler@sha256:d304c606e0b6157e0932e9d8f707ca4eaedbb22fa5440ee745444eb16a01707e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/dapr-scheduler@sha256:cc0e991cfcd58a6db0e9aed807f914a0ea9a2e58606592389c29e3992f54779d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/dapr-scheduler@sha256:9a5b0c3eca0497b8db34362f9f988f928e0491401a344a9b403dd365d8f2e8a9
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/dapr-scheduler@sha256:100b453385d336555d3e1e4979e725f3a36022176579035ca27af13c330acab6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/dapr-scheduler@sha256:401ba1394b2b40a2e91e8c364185450b47c25c16c8657169f90222967a3b6583
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/dapr-scheduler@sha256:a0e3559ed743e7c35be145f648d031dc920aa0a49952dce0116629958d579523
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/dapr-scheduler@sha256:53013023403d15ddaf5d7bcce3dabfd8c1daa2676dfa818bd716e8c4702537a8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/dapr-scheduler@sha256:48f231066e6bfbdd5f432a7fa2ca64d669433b392a9528d56052a7ac6687787f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/dapr-scheduler@sha256:d64198e82eab16a75d55d71b76282b5e9a94c573ed84688444a9a81cc38629f4
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/dapr-scheduler@sha256:68be973eb698169bc7d13942f6cca3f1cbc695d68c781421420b63c0788c36b3
SPDX SBOMhttps://spdx.dev/Documentdhi.io/dapr-scheduler@sha256:2a11e6c7ebf58965538e078105726f02860c4b8ad5249c6c36281edc9b035bb4