Sign inSign up
k8ssandra-client

dhi.io/k8ssandra-client

k8ssandra-client 0.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.9-debian-fips, 0.9-debian13-fips, 0.9-fips, 0.9.1-debian-fips, 0.9.1-debian13-fips, 0.9.1-fips

Index digest:

sha256:35f4cc49eabc78e72470ed17e67a28f32cdd169c47ca5b1205444ae350f8f474

Manifest digest:

sha256:4b4521108404eed5920d52f96c3b82acbabf9e3554273d220d863a523eab50ea

Size

61.03 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8ssandra-client:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8ssandra-client:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8ssandra-client@sha256:5eed40ccbc6814f47b8409d003bccb47835de8b8cbbca4a2dc569c0936c78618
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8ssandra-client@sha256:cd14196f57fae0e885f662650f3ee4b4d46e79c514019906f742f008a1ab0095
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8ssandra-client@sha256:018b892f46bbad7616ccebafda043f73cc3e1e7b5c3acbd7c04d573941f53d74
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8ssandra-client@sha256:89847accfe950ae6923c2fabe6c0adac486a3a686e3072f4339b7cc4d9a50691
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8ssandra-client@sha256:19e1042d691d500b24f62eab0a856d2fd596e249afe3d7642b99ffc70e11ed82
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8ssandra-client@sha256:0728c94de6686887f8f7c7e98f8fb820a2cd0ec48edc5d3ab2ad041e9cfe634b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8ssandra-client@sha256:4f77d9658aabff4d797342250df614b1c2a54a0949baf9903a4a4f4e6697fea2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8ssandra-client@sha256:6df1f7ad3646525d88b7ab8f02054bec0d16f07960b61fb5096a2d4d70a7d9d5
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8ssandra-client@sha256:b0fce7b5aa70c3e33f07b4a29557c3452c3fdf29325aeb2b66afe6c41ab97673
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8ssandra-client@sha256:0732411059ae338a7d835504349ca1aef6ccd27e746bb5146d025bf4d5bb2f15
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8ssandra-client@sha256:fc7cbb623fe30b09bda3839d03ac08eba407bd56d3b9d77678e0115983b8c3c7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8ssandra-client@sha256:5078a21985df0877c29cebce590aeb32b22e0dab4541ca9dc9744624eea85bd4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8ssandra-client@sha256:42c39b8fe9a939093c908c2a2a4fd1137d1f145c86cc71d1760be44cdd44893e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8ssandra-client@sha256:bf240aa04e6fd40183b7606da434d05c62d05a65664021824422415628429a51
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8ssandra-client@sha256:47f3c001be89eb746bf35337dbc527773c3106f04954da99ec8aad3add202943
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8ssandra-client@sha256:d46d86142cbde02d5e25eeb86aed782ccd29bf434f913412bea5e84a6cff8129
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8ssandra-client@sha256:6a58d2a2c26a2a69991ac2ca1a19879c31073063fe5c91dbe35edcd12d489d29