dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (dev)
3.3-debian-dev, 3.3-debian13-dev, 3.3-dev, 3.3.1-debian-dev, 3.3.1-debian13-dev, 3.3.1-dev
sha256:ae2b51b80bc0ed7eb89d0741a29f00e4ceed0694d0698b65c36042ffd1437329
Manifest digest:sha256:382fd0ff6e96f3eb290b8820c53fbdc20622c54ceb03bb3b14bc9af4de110e9c
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:fcf0ebd03ba4d8fad86d9ddab30b3c840fd35126956befd55f39ca859a16ce68 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:f63957b5b4ef697d98652a07340b62a081dfb064e71761a14528d10a6b124a58 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:dfab3257a159829b156f263f3a96f04a43fe0ef3d14e5cb0a7685ebabf33d26c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:dc3bda486c75a1e4744a3e9cf527a3419967db1dd63fb70957b2dc645e8710f3 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:22d1305744a39c16aebd6e391d28a91c6300bb133d5bc7ac6f54cc0c2796fc2e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:94f55fbbcbb1df84e0be0ef22d1421cbadec6088d9c26271a6915fdfbe4ed764 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:56c917754b7c9f790230a13e6dd0676847408997f480f6c5e9c91491897e8d2f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:93a26d30b13408c6da9c8eec03c125f40927007603c5cb7dd7fb709b640d411d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:61e38c856c8c24b20859bc05356307524df3379473ed7ca0355f8adf53240ee2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:6020a259dc187f911b54d513936611f880d33675b84103546e183369d49e75a3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:913a8faea593cb79fe85d72c0863ee1781a081bbf99a6dd1e6eb08aef7a89cfd |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:038b205f47a1b279628110fc2fbe4908aedd0897c2a926feef6c7b8e652c19ea |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:0ab180901f6a02840dce21d4bde544c26c52f7dde9424dea7c7f2c1d9a07bcbe |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:bc87c4f0b468b01fe3a83229a46e568b07f500a1c6f4d588520403ef3a870c19 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:741d21cd1ca97e55bd7c7d5d6dd55c83c8741f5a9b20ba9e7fd76d85518ec815 |