dhi.io/rabbitmq
RabbitMQ 4.3.x (dev)
4-debian-dev, 4-debian13-dev, 4-dev, 4.3-debian-dev, 4.3-debian13-dev, 4.3-dev, 4.3.6-debian-dev, 4.3.6-debian13-dev, 4.3.6-dev
sha256:921a0f697ad55dd52aa79740f048b317f31a601d25e0188e1ab1947f3afecf8a
Manifest digest:sha256:33a8a20beef463058af8f19273ed942a91793c363deb09ecb15e921e4e43bddc
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/rabbitmq:4-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/rabbitmq:4-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/rabbitmq@sha256:3ab8c0fbdec4912d055e2fb2d8232b578ff70b756ce154b988ee2d3f0af990fc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/rabbitmq@sha256:4366e65d6546c868ac545211fe29c609c62ecc120e710d21e5fe2776307427c8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/rabbitmq@sha256:fa683abae5f27d28ada696c72118ce923c90b831be8fd8b279272c8954788420 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/rabbitmq@sha256:ae34240f03775f6c99ed25f5216d315d8ec5a58293952381359967bda5edb1f0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/rabbitmq@sha256:ed8eea242984853432b8b3e9ab646d9b0155759e634ea3611e9d992d63ea9bae |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/rabbitmq@sha256:515e3f7ac479eeee9eb8928f57e16490671816b107fd7824928c237fd436f7ee |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/rabbitmq@sha256:0ef584713233044e5ee4dd9160bf879c985d3cd4efe7ac977324e22d46f4943b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/rabbitmq@sha256:94415855cae74e39c9669f5007b4f48716bc41c989df5e587d7573cf456dd653 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/rabbitmq@sha256:ff33b944f7b57005a8ed2af3fc1800c9a45cfcd02c06d1da6923a88f2f268384 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/rabbitmq@sha256:f9773a01249811339d6ae321ed5466d8c86742081d4860eab180b43c15eba6b2 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/rabbitmq@sha256:ab9466aa688d1900ec1d095c9ed2b4c8579a5c2fd334ef877c109cb09edf6ec5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/rabbitmq@sha256:1679b270b563b5c0cdbc4695ae369a02878f527d050e2e16be3830ca5fc8f78e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/rabbitmq@sha256:38975a41a8b3f6c77570ed7f9019c085080da939030885f82a483e0f2a774e8f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/rabbitmq@sha256:1cc96d62856fce75867da6cfad3c90ea3654588edd6a6a202d99ca481575b859 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/rabbitmq@sha256:64e63572084b72ab0b473e2c4d1c2e7515e3accddf421258f5a02bc023865f48 |