dhi.io/vsphere-copy-offload-populator
2-debian-fips, 2-debian13-fips, 2-fips, 2.12-debian-fips, 2.12-debian13-fips, 2.12-fips, 2.12.9-debian-fips, 2.12.9-debian13-fips, 2.12.9-fips
sha256:1831bfe5a508cc9e5898dbc725494f942b3fd965b134e4606aaaf162cd250a91
Manifest digest:sha256:a5d06dd43a7486af2819b81f59968ff2179f5217edbc03ee076a325be41bee89
Size
44.10 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/vsphere-copy-offload-populator:2-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-copy-offload-populator:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-copy-offload-populator@sha256:b87c50aff66fdb6ec280525193e3b98e35fc533136f3ca14637105c6519d1d85 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:8acb3b3edbe43b822ab763509e2ab8d4b14662816dd5d206755e31f64aca7757 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:e8281ce72356473a7437298314b8468e6b90cfa115edbbec76f2037e4c861b41 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:a79ba51108041e80ce098b1fb99fa805d0a3a11e184322e2b7a58c2cb5444027 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:09db5ef98eef619b1f7ce6fe36e8a8b93da5ffc330f6224f8761d61101e073b2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-copy-offload-populator@sha256:2f9e3828c90dfcffa6a4df1d0d02ed12a536726a8d7ef91e4ef00c346460120f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-copy-offload-populator@sha256:8281f1bfe37fab7b7fa3445ea877c8284f0a4d4987feccbe32b10d23cd4325b9 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:2e131a3978f609b2b3c99ad9494b878722ed44afbc53b6da0dd30c6a7114a00b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:94a6a95aada1ddb3bfb4d6e4486fc79a0674e38438b14097c2f3913583ae0b83 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:7ec00147d721cb09508d63f1162c26336bf517be415e813655ebf42265f68bae |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:4e4941bb68924cdadf457af7cbd351a89582e4a98967260937cb9e20798b9b0a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:fa2785b90802ef85dc577b911b33b0232d95a79cc145e3ce27e51f246979205c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-copy-offload-populator@sha256:23a2715678d79f3a2d2760edae666ebff5ac8d0d0f7b70a26590de93a4ea7d4e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-copy-offload-populator@sha256:d58b0b8afe9d9ae8883938d081fc780bc175bc120d032c6b95e44d511ab7ebbb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-copy-offload-populator@sha256:25f29da0cb53390dea0bf1e4bbd58312a9b6d1dfcc9c8b2fed34fe67c4dd3213 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-copy-offload-populator@sha256:f11f46dc2643c253ea026ee4bc8e43b11f9884fd095c08e4fce9bbc2f7b545c8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-copy-offload-populator@sha256:fc1fa116b3f1cc1c7ed22cc7a8093bd8f9610105234a461728cd82703dd18f61 |