dhi.io/forklift-controller
2-alpine-fips, 2-alpine3.24-fips, 2.12-alpine-fips, 2.12-alpine3.24-fips, 2.12.8-alpine-fips, 2.12.8-alpine3.24-fips
sha256:a7f3495086a9ff85407db0391a196efde5137d3ea6032e473a57f25d76381dc4
Manifest digest:sha256:c0cdfd1ed27090381cb9de9ba100702b3af1843fa7f779aeb8008c842e2e367d
Size
31.70 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-controller:2-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-controller:2-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-controller@sha256:000d9ac869252dfe8d0284d8f97a3ae3de6879b9e553ddf334ad01317bfb2ab1 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-controller@sha256:c8c266bdfd45a86313cba14435fa9d7b4a3feaec6ba5b303f1597005c900417e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/forklift-controller@sha256:a61b57c2bc8a97707102196a448d801e63841e94dac6ac52ff6ba77d93426f17 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-controller@sha256:2d39a7fc5b1013bc18689bee9f7af906cb703fa68ecae0c00dc4d09bf4e4b813 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/forklift-controller@sha256:82f66001c0a25fb5fcebdf8045504fefb5eb4788299ed7bac49f1f69c7d8b49c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-controller@sha256:6fee2ea05c0db04458f2b3c4df1450180ba25263ef85e7ba1c21cc1c1ccab6a6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-controller@sha256:1d90bd050a68c4e7835aad49bad05293fa689e961a6e60988487c7b11b3bb00e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-controller@sha256:e81db04f4b1abc1b39c4bad2ea29e94c1b844766b541b414bdba2a35d2b8d18a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-controller@sha256:b39fb68ffb6c91a9c6266e6ddcff38ff04d138e4929d3e9d6b71cdacd2b8c3ee |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-controller@sha256:d90b68fa7e4523babcf3d6d2558418ca244d4e0acc8395ea63ac1c0a319b65d5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-controller@sha256:e5a8ed1d599857e6a96f3bcb96472031759a4c3302eda5f9b628c929e1ce800d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-controller@sha256:c8e8749aa524bd6c2d1b78770dd4665f5fc9d99535a87d19057d71a332a7c391 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-controller@sha256:fff237451e0515393f8c306dc9d6c9f5fa61bbc98da4f312dc1b00946aa9dcee |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-controller@sha256:44055d77f5faf3851e8a733dd31bec1296f9b371f9c0f47a252dc0784cb8d06b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-controller@sha256:49129149cb0d3360badccfebdb67add16d0feb2f93c9261b4f897abf60bcd61b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-controller@sha256:5ecfb1a9cca998594286a96dfbfdbbdbfabe2eae45ea76ed3c9b3ed7c2bafde7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-controller@sha256:179e7842a207b03a1f94bccf05c39ac52cccb91c7ca9d9e7442c938fa5cdceea |