dhi.io/node-exporter
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.12-debian-fips-dev, 1.12-debian13-fips-dev, 1.12-fips-dev, 1.12.1-debian-fips-dev, 1.12.1-debian13-fips-dev, 1.12.1-fips-dev
sha256:448b3c3619aa3b2f0a4cbf991aa8c5de49b2df0fc3cdca0068b7d5a0de5492d3
Manifest digest:sha256:9a752f39cf52de9aea1788e271d47f3a9c4544eaa649fdc838ea495ff43b2281
Size
34.98 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/node-exporter:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/node-exporter:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/node-exporter@sha256:119632ec54192f3a8d6c11842c0d922dd8a19b6c689d825a3650a36e7ebd3b4e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/node-exporter@sha256:bc2cfb2510f743c8f55fe47ad124f0366d9390a1618c60a371038c08d19a26a3 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/node-exporter@sha256:bc69e0a199cbd9b87a62ab1e5e1dfc6d62bd69fb958e573504341f748a99f3f9 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/node-exporter@sha256:1e0e7a1cdc7e6b447881cb976651ae9fc9803a4058b197c160407b7bb161767a |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/node-exporter@sha256:f7c8f66d28f120573512c83ea8fd6821ef58f21947c7c66d34b45d09fea4e0e1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/node-exporter@sha256:0c7203d6092debd5170b854f3e10cd78640ff4ef09173c839cb77dbdf9b63328 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/node-exporter@sha256:a3c7db68e8bbe0fd1b11c5f5196d8ecad1ede8a3f1d291642cd60f3771438a8f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/node-exporter@sha256:45136cd1b471de9e0c2e1c526920467b9172a4ed5dbc5c173c66c64fdcaa4914 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/node-exporter@sha256:7582b45cf8f6ceebfe5da7fa487b2572258e4713dbd76ae8b72ce4c24dd73802 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/node-exporter@sha256:a4a12fda7eb0035e6e2b45bb9804bd2e0215d6d38c69115d634bb45f61797cde |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/node-exporter@sha256:aa81df51928731cd677b88b1ef65ecfc0251b1c5d27548c59109d7f449699ca1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/node-exporter@sha256:ee2c1438f28bc3bb8f2d3be85a92f0b90784ec50e16cf5e0e3e86b688b9dbfc8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/node-exporter@sha256:0f30dab01bec26a0a18fac1c94d8307c399c71c8ebb84b6c9ab95e5c428f0f56 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/node-exporter@sha256:782cb023cbb1af9acdd9ed66f753cc46b8e152c110ab9cd3a6698d95697ea426 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/node-exporter@sha256:16326475b2b44ce34447c3e8b86a50fbad9edb2c7bae3832ca43724ebdebd164 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/node-exporter@sha256:a45a06eb29e85333e9d4cce4d3eaeeca25e616cb7c56836f4f488c8d017c6df6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/node-exporter@sha256:d4d63287a3254df76794a11e90aa137edbcb985539117d16f4a52b3d7925cb76 |