Sign inSign up
Console for Red Hat OpenShift

dhi.io/openshift-console

Console for Red Hat OpenShift 4.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

4-alpine-fips, 4-alpine3.24-fips, 4.22-alpine-fips, 4.22-alpine3.24-fips, 4.22.14-alpine-fips, 4.22.14-alpine3.24-fips

Index digest:

sha256:a3cc218ac23f969dac38615747aaabaf7a75caa3e2f2aa8edba45f9a7ac38477

Manifest digest:

sha256:c9ff760e7ab42461f507e7bfec608625617380332f34e059c90cf06b95e15758

Size

30.05 MB

Last pushed

20 hours ago

Vulnerabilities

0
0
3
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/openshift-console:4-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/openshift-console:4-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/openshift-console@sha256:a364c4185302909e69dab904c15c79162bf0a4a403d71835066a38853f044bb2
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/openshift-console@sha256:8ebf8ce0fec7eea12113045fbb693b4cf82235b05a6ffb232390b5058cc477a3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/openshift-console@sha256:315a6ba7463ad3615f5c000ac89fcb32ac8172dc2181bc2a1b92aa7bba5342af
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/openshift-console@sha256:a11020ba4e08b9ec9bcab11e88c05473469fc19a0092dbfd9c04bea8dc20979d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/openshift-console@sha256:ef63633a9ddf68ed84e497ff534e24b6b47671b7409bac8f07c026903f1d8e42
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/openshift-console@sha256:53ba7f1bf50c645ebb58cbe86b8fa88c45a8eba77ab5d491ac4ab51cde7d0a8e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/openshift-console@sha256:8e23a84bc58ca7e7d26e735b98bc99b845d3f632ee4fca783786694d80176c3e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/openshift-console@sha256:6fb2631bb472950e347fd8e5b10f2e350e87f3489c8dc1be163233fb04abd9f0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/openshift-console@sha256:4e3abb6d545d0971306a2f9bfeea529376cf131a58577778ef0b80a6c04636b6
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/openshift-console@sha256:433af10790f40ffaf115aaf318278ca0753107b6eb23cc0583ca9dc108b77c6b
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/openshift-console@sha256:aa2581949f6fc8b38d05486dcbdba35dca571fc796dee2a239729ef41834a33e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/openshift-console@sha256:e639abdf28d7810392cd535c226fbdbba8f4bd3bd26e4363d984660e2512c5ee
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/openshift-console@sha256:7210aab9b2c550d5c1fd467d2670f6007ed0348a9cbc63c0a96b563b6b242b15
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/openshift-console@sha256:0e5817aca44c156d7cb0cc046de17b660fcc38d60cab63caca492d3a04650e8a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/openshift-console@sha256:55960881d3e5420cd86ff9eb624d505b3d4214084b33c7b5614addf9ce5947e3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/openshift-console@sha256:898e4d5b05fe9ddf3e6da8dc4265d9dd73da78e0f896771d58442a156beefd03
SPDX SBOMhttps://spdx.dev/Documentdhi.io/openshift-console@sha256:63039459a4c0bfd7d78ec2d4ef8c6c9da67d4e61116c5827c5516cc3eeef9ea1