dhi.io/netdata-agent-sd
0-alpine-fips, 0-alpine3.24-fips, 0.2-alpine-fips, 0.2-alpine3.24-fips, 0.2.10-alpine-fips, 0.2.10-alpine3.24-fips
sha256:40de14ed4a22a7a3e23409eadccd50416d6830091d69efad4998a9414ca7a75d
Manifest digest:sha256:f3ec47a5825b2f08932c08afdc9c3ec6020d8430c77635589bd347969bb94d80
Size
14.39 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:aaa30f7759742e9f4ea30b8b35c6c6eb417edb5a7cbb2a0eeaee424b554eb879 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:fef62be3f4f0df7088fd4a6f3e16b703429be4892ee49ae6925323a2cd073871 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:8bc51df9582e0c8a799eae5015b62b430a69af69cdce7c80d5c91f189d589f8f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:3fb5427eee58af2a5c04fcb6f05f09666435c9a78b03f0d057b0ec47624f2b3e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:30740586bed87d05c33ab6830bd19f05c53e4bbf46759e116783d2f1a3d7f85f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:844263924c67eb5910796151880a6cb4c9ab6a803a37f8d662f245bae28350a0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:7aa3bec14cb20b514063b10ad98effaf2e9346414ae0ec11d1c3ebb62d884394 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:ffa8872b1f7e99947c49aaa204fbdad02399bcc9118218f4a2961a51849ebb8f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:0124cafe3c04ec19c1aa7f0a789b7410b81b4148a5419727a81f7ebee0ff2c9a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:300ef68971ae34d4bca538eb206bbcf81180e5fe67e45b3fbaa2a851886aa3db |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:2e49adbea784c701cf85718cf22194db9a6d7a21e875a354f9d56726cc4a2324 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:1e18b6f817c26650f3cc2a74795c2e74f0535418e8bd5da1edbdd634c4bca91b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:eff97c9654b75e67e585eeaeed5b7523d64c0edd0fb5a56702ec4647323ff0cc |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:299fa9d588b2df709e340ae31659ef80dc6cef3149eb784202d364d99e025f22 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:08cf31ed2841a44775fb0edf08f015ce31a7a91e2555c7e68e2cde95b3f4661a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:d7b3b38a0d3e6c7a2c3674a3e3e73cd90dbe250f642130ad62dbf7d053edac96 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:1c1bf52eba77ebab2f2848833fc916b30a0af67edbeca61ffce0f878fa3031e1 |