dhi.io/jenkins-inbound-agent
3390-debian-fips, 3390-debian13-fips, 3390-fips
sha256:4ee5dd51e993f453a9714a15cf75d4526b40971f13c1f6d80a6d41fa6c6fe043
Manifest digest:sha256:db46d092f4c472baab59631c4d33a6011e25c9db9f7126912d272fa7c31ce3f7
Size
90.54 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/jenkins-inbound-agent:3390-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/jenkins-inbound-agent:3390-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/jenkins-inbound-agent@sha256:db1c70f962eeffe73bc72661b553cbfa10f0d2b8da1d4fd7d325cf362bc58cd8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/jenkins-inbound-agent@sha256:ba27a84905d21a13939386f45f8d890ec672f08c535cb8040527e62ad947bf61 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/jenkins-inbound-agent@sha256:85a70334094edfb0d7c9c38b777dfde4530d4025943514d31f317046219ef7b4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/jenkins-inbound-agent@sha256:22d5a5f8fe093eaacc8527d159266022b324ede5984e7054454c3fcdd8e2a957 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/jenkins-inbound-agent@sha256:e71366b6f501ac8b9e2d39aa54170b34b353890e79a5c8ea171182fe18b0560e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/jenkins-inbound-agent@sha256:f123e0f52f37c914863ca1585b8cefb71ff2a7c67f3da5458ed3ec2e3e4e061a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/jenkins-inbound-agent@sha256:1ebcf732731c390a7e1dad006d739ecb229e4ee6b67feecc5818b45dfeacafec |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/jenkins-inbound-agent@sha256:57c67d6f7b0fb9f63428e7b35abe62cf6a9f43f9d9e48208a17ef4052addd63b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/jenkins-inbound-agent@sha256:09a0e312857095ac898d97eb5f8854b013648e7eedf8867bff623743e4b9227d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/jenkins-inbound-agent@sha256:9ac140126f7768968e5d81f6752486f805abdb91b9cc063b0514fbf1e3aa8461 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/jenkins-inbound-agent@sha256:cdd93bbb2cb92a84dffdc89ff0c479f985bb8a375b4f89053d92a52850dd24d5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/jenkins-inbound-agent@sha256:f5800b217cc2393d2d64b4d8aa33b03c16ab926c1265ff1ec135e0ec029a6884 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/jenkins-inbound-agent@sha256:3f5fa3da1c3c6b5670a27fa8244c7bf238994fa4633632959f8b77dd983d2ece |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/jenkins-inbound-agent@sha256:1e5ad2f2be6eaa5132dd55008f51e2fc53154e729b19400716911e302cdba4e1 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/jenkins-inbound-agent@sha256:df3c995a3d22815fd0134703936e98b87b25feca252391793e08037cd3f33adf |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/jenkins-inbound-agent@sha256:d91e70e0eff756f7033765f9e67b3740cbeb5b9332a52246817eb673b297855a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/jenkins-inbound-agent@sha256:6d98d1d6c0bbfa6f8466811972897c88c5e23801de7197dddc574601db5af782 |