dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (dev)
3.3-debian-dev, 3.3-debian13-dev, 3.3-dev, 3.3.1-debian-dev, 3.3.1-debian13-dev, 3.3.1-dev
sha256:8b474710300f7520cf8a5345c1939d58d1e4ba71b3f4ddbb1dd4a7acf02a24d7
Manifest digest:sha256:037efb68fdbbc0b153bbb064d3627e7df74c3a09faef7e8d020584df40a22d28
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:de250f148cc3ffe0798ef730aa830ffa941412e5e78bb5a4a66a6696b1598ed1 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:66d1c9c9114becfd10e21807259b1f2d0034fac965aab771129493d332c106bc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:e790d897ace61d10403f249d14d2f579cc454011a0bd059a14b936dd9b277ed9 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:d230c710eb0a42b60f2d3a3a42f8178e3907aa89b2bb3844a8cac82ef1f77ced |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:2d35f9c10ba96402ca988ea8a83157975646457ac5c4cedd5f68ddc4831cb022 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:bd3390ec867d9d5f1ed1973ebad85a426929531b7bdc91847fe1b27a7cf668b9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:6b5a0ca7fa02411fe851755eb103f2c2582b33d0a7bcb535665c390085835425 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:7ca513a38141c2898ddd16382c1c2ec65d2ae70448da584462fa74ea1453777a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:4d8931afda17c8264b744e72416cc19285fc449125789088994e9d9d6026244f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:4bdbc1a9eaaf74edb6953fe835ca7872c7b6d581ef32e2668941de29975744a8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:0a3426b7237837048a4a2f0a6f39f77029b5a75986de2b849039c7df95e6784b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:bd05919a7ec0d248ce23f6da42fbed43b5bb9c766c9cc07b45a3729add7565f0 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:2bf39b9e5bd36785d991e30b95181a39bb50b22205eacfd3f929ab8732a8c525 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:5d9eec0a0b2cf3298d15b0b6d281f2e7675a1cef72dc5755c31de6463d6bdf3b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:e2e623b7f5020195ceae3eea6834908042e0374b89d009f6a4364387a5b85ea3 |