dhi.io/forklift-controller
2-debian-dev, 2-debian13-dev, 2-dev, 2.12-debian-dev, 2.12-debian13-dev, 2.12-dev, 2.12.8-debian-dev, 2.12.8-debian13-dev, 2.12.8-dev
sha256:bcd4c64b04c838c003760b9d558140502a99a977653f16868d7794d8331f387a
Manifest digest:sha256:6160a722f764cc01ca760480d9fa5801430f3fec03024ece411b9ca975b480c6
Size
79.56 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-controller:2-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-controller:2-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-controller@sha256:ffd16c659f9639f0ceb510cb0237cf9eab2aa664a37506cebc6de581eda3acd2 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-controller@sha256:f13f708ddf3911a42a3aa8ba75e4c2ea2e495c754eda2809f0d29bf2019ca9cd |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-controller@sha256:740e19f3f1634a83bc9e85ea75cb19949a5cbccf9a9482eb4bda494ad97334a8 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-controller@sha256:6fb637b1e356b00719b629ed20f50ec6d3c41a4846b72fec5dead8db20b61d80 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-controller@sha256:1f3528de9ce4c550bbcbabe5a4c045ac682f430c0c98fd2ff94ad959b91435bf |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-controller@sha256:0c48c840c9e5ea773ab4f71629b1907d403e178800a2c6ec454aa7a9d5c92243 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-controller@sha256:f20c9f1d4523e39879cfe6b48563decb506828917620251b972c13be7c92b65e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-controller@sha256:3453566cad2a7bed9e38ab2cfd6180d758019798148334f8d4d16e77c09db574 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-controller@sha256:506967a605dcc18a72e700b4ecb56eaf03be2f5736797853a48c690277acaf99 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-controller@sha256:8029fe78d60ee57f876721071e3eb6615b19f89282bab2580c19913feb06f5d1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-controller@sha256:019bacf1434c5e7925bbf9762610aab1dea255e0c3170c08b4544e8bace441fa |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-controller@sha256:af8677ffb73e218b26f52f5b7f8e2e1820a3f33744688f4ff3d4294676ea6f7e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-controller@sha256:25fd9103dd28ce9ed210dfca38d4111fca42015b328413e86cc2fb346621c947 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-controller@sha256:a89409dcee211884a5c8da5d9af358d94fa61e0dd694e91223071dcf7f41d375 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-controller@sha256:23a0be2d95b03afbeeb607540ba8225b702c55ad0e0e1a7a9183db26f16a926f |