dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (fips, dev)
3.3-debian-fips-dev, 3.3-debian13-fips-dev, 3.3-fips-dev, 3.3.1-debian-fips-dev, 3.3.1-debian13-fips-dev, 3.3.1-fips-dev
sha256:8ee008eda4744b533cb3d8d264346df35531ae9489d6a1e6455b1e0a8bdf3792
Manifest digest:sha256:d8ae09f8d22e4715ca87acf155290ef555ad2a6345a2a59c346e24198969b5af
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:a1afd85e87d0c39170ba2b849c8c6689a2dd94dc501d7d63149de18809bee694 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:55944fc95934932272b1275144a3792da9b30cf52ebaf3c46eca70f9a1e5e29c |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/vsphere-csi-driver@sha256:11f5785b5ae0a0b70b665696bccdfd69e945f7fe293cf5dcb696fbb24948a61a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:8878d625cc03ad0fec3db4c73119acfa81e2b372cd4e9e803d67d71246f56d02 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/vsphere-csi-driver@sha256:64d69967bd8039f51abfe716c3bd3e25d0fbb76cb663edc277e9177425fe8ba0 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:7cac51e81798efd37528436f6a034cdb1e5b357e170d127bef6810196b9189b5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:e58baea481dc6468bf584bd4b97c49a28d9aaf8dc6ff29025ba2332f63593873 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:5d270009910cd517c072072f3b1ec58b0524e2275dcde48ade348cb7dee4f1c5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:b2ec197a6fefb60c28e9d2fe94ba418475f5c17ce13ee2a60cd07f1fe3a62857 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:4434dda1a179d029a60d831e5d3b435a50bcf4775fcaf3234aff9cd2ffd9cf44 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:c0cedad90bf4287cdecf11cdfb81008d53d3da13b327ea08139cfa87e79baa9f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:f0affecd143da5583826b31ba876427a76c4d6c629176c0fafa8d984303c3377 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:831b312487d98318927a6342854c39cabb62dc5edecfa6c37972defa5e44de90 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:e3edb93460e16c500133203bffd4cdbab5647fb0f3e78228932ee28d3afaccac |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:a958bb36c96016b2761c235cc6c59101d404ce8890be967663a80a1fe4453638 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:28bb8903fd4941ce4000b512b564a28c1602fb871d236e0dc6fcb617c7276e4b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:e041662532f6a21160136c82dde63bf4ae418b2682dfbdf6eb29a4d12e907bc4 |