dhi.io/openshift-console
4-alpine-fips-dev, 4-alpine3.24-fips-dev, 4.22-alpine-fips-dev, 4.22-alpine3.24-fips-dev, 4.22.14-alpine-fips-dev, 4.22.14-alpine3.24-fips-dev
sha256:e70da8a32a7acea8e0705621c77f17f41097f092222b81354d9c5dd90778adbb
Manifest digest:sha256:e9af30147a7c7b65bccae8e7119685f385ff0e582c2ad257a22e53a6b779faf5
Size
64.54 MB
Last pushed
4 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/openshift-console:4-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/openshift-console:4-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/openshift-console@sha256:5421d2ab0356c2f4a66de289ae23ddab1a82bfb45fa32f19ef4fb60ac36be168 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/openshift-console@sha256:1fa56af96a7cf3eeafd2458a7b1cec4d28f5714f1f9ed121bc50324b1e6b256b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/openshift-console@sha256:4aad84b838cef1e14b5f465b4c7e2d0e1ae77f54a2205d157cd363e723c9e684 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/openshift-console@sha256:e1cd082270181d52149224a34b3f9c07dcd911ef0ca1a0e7376821fe4b5cb34f |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/openshift-console@sha256:7828fe9d358432483172c4b72e5d59b1f5c0b43b01531b6cd4b546ced66ca80a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/openshift-console@sha256:9ad161f84be0853072676769c38eb3eb045c3608d49606a6a129b909e2947b20 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/openshift-console@sha256:0cada9c42312ca2ec16a1f187f7c142853f80d7cd13baee53c498ec4562dd255 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/openshift-console@sha256:c88f7cbb428fce719b08897f5b0cb68362a02a0cfe6ea2f6867870b17ec77d51 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/openshift-console@sha256:539e778faa571bb59c3920fdc646a4d28a7e51b435ec4dca6096f87e8dcbee74 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/openshift-console@sha256:3875c9c254029032107e257881835cde25e62eeb60b808e47db618e4f54cf655 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/openshift-console@sha256:a451221694f43d159a2aa409465a228462c91bface69a154592cae1f60fdef4d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/openshift-console@sha256:61b078540ec9e99e382566741f0119bd9bcea8f95dcc3ee66249308fbf1ae9ab |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/openshift-console@sha256:35e5ccd217ec52152e8404909062cee2a0295fb70783feec8797d19f6c84c9ec |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/openshift-console@sha256:6a97cc9858af987f1685fd053feb753c907ae3e80a04c2ea5989ef15b87f30f8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/openshift-console@sha256:5b57fc37967a292797d112aa93f644f3a8eda7dc4ec08246bda5c7be4423edf9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/openshift-console@sha256:34f7b4ee909bb328b4f5338430e7265367e3293c7ec3cdc6a859915336493683 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/openshift-console@sha256:f4e03b5ced719c7c4bd27aa38b52db1687ac8866d59c81d664b4436259becbd1 |