dhi.io/rabbitmq
RabbitMQ 4.3.x (fips, dev)
4-debian-fips-dev, 4-debian13-fips-dev, 4-fips-dev, 4.3-debian-fips-dev, 4.3-debian13-fips-dev, 4.3-fips-dev, 4.3.6-debian-fips-dev, 4.3.6-debian13-fips-dev, 4.3.6-fips-dev
sha256:0ddd58220913a0180817ab4108344d291dfb17f1917a8f2c8a373a539c7263c9
Manifest digest:sha256:1db51ea33cbcfa6e9ae54a1a5d0f3edaaee202a7a4c4b56a61d7cf950fc37d7d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/rabbitmq:4-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/rabbitmq:4-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/rabbitmq@sha256:459b8c22ff72bf2b9e9b7b5cc7c69abf37edef70429ffc3286009becbe6444c8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/rabbitmq@sha256:bc96b4f9e668f8ec380c479d0357d1a5b1571a90c55b87b7963ec8059010a3ed |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/rabbitmq@sha256:4869f11c3960f2787d584e69ad0f2d8dfd20c683494a2aa06e46b33b8703a904 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/rabbitmq@sha256:a5c8561cf41a25e5547a10ecfd44529f495aec38555763270a565e48dcf36ee4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/rabbitmq@sha256:8871b250a72ec41ddefbe110f9ac12cbf2c119e0ceb72ce9f060016107713648 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/rabbitmq@sha256:9df3e2f5c1beaaea42cbc2b22e53515ee9a54fbb057f2825b9b2988218957a93 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/rabbitmq@sha256:2167e402ae45d6e3e9524cf45e034f2f380927f91863477e7a76b2158c60c58b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/rabbitmq@sha256:9aa8257808c02d7d4fb88da2ee8aa3e141e9a47b9dadc7f48d42619b92a49328 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/rabbitmq@sha256:2b0143ce5b1d1f01858f31d77d451f113465589153470a2f47883592710df21d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/rabbitmq@sha256:6556d22fca9aa1e468c978b7467d4fce9d309e86f64618fb83837ff616860afc |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/rabbitmq@sha256:df7b55d80af685b00eeeee641b85b7b0d3a823c0b222ae0cb0a7e67e5f5f0809 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/rabbitmq@sha256:47823dd9b49ef77e007387558c965631df927184fbf3850de52a364418ab0eb4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/rabbitmq@sha256:b136d35aee1659ee3f918330199f1079b64aaf27a7b200e128f2492ac940cd5e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/rabbitmq@sha256:ba9f2c7bcc45d4451426288a16b8fc520f1a45900404f5d050e306032888d99d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/rabbitmq@sha256:2053b1a15b1a8aec8aab0718e90c871ac0edf93319bb378da2f52e0f8861dd3f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/rabbitmq@sha256:db955c1a19a87cf18c58f6f54ecfff03b792edc569e98beb29342065833fa192 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/rabbitmq@sha256:bbd9e21013cc4262e6dd2529ac7114b83a9308730afa0717a4642a74ba6853bb |