Sign inSign up
vSphere CSI Driver

dhi.io/vsphere-csi-driver

vSphere CSI Driver 3.7.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.7-debian-fips-dev, 3.7-debian13-fips-dev, 3.7-fips-dev, 3.7.3-debian-fips-dev, 3.7.3-debian13-fips-dev, 3.7.3-fips-dev

Index digest:

sha256:40bd61f8e85a7181f042ee2b759a55cc0f6b2fd726c7eb3ce9f1ace1ae0c2230

Manifest digest:

sha256:1902e1a20ceb0282b4b8497af8d7d3a492b112c06477adf93758dc16f4da6732

Size

88.66 MB

Last pushed

2 days ago

Vulnerabilities

0
0
1
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/vsphere-csi-driver:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/vsphere-csi-driver:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/vsphere-csi-driver@sha256:8cd9dc4dded0735b8aa3110d185c25f0a6dd2671085fef2fbf9cafbfb63180c7
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/vsphere-csi-driver@sha256:9ad5a642cbb9fbbc1ae81ebc21404086e1d837355a44b24e29d144e7600ad652
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/vsphere-csi-driver@sha256:24e34418811aa37ab96ff5546b5a31dd4aedf3ae65bf52c674af73a5bf8ed4d8
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/vsphere-csi-driver@sha256:37b1dbad68911d9ad4fbc193ab485aff8e569134d96d9d9ee5a1c4a4edc72b8c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/vsphere-csi-driver@sha256:84ec09d57cb8a2ded50fea2290e0292078882c6a9b1096adde346b5b142332b1
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/vsphere-csi-driver@sha256:7d1a31014c357a2c0c636982d01dbfd4c6b80cc65a2b1baaa297ec0b9a2c97b3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/vsphere-csi-driver@sha256:b8776743845079a0f0c3e160f608939365c29662b41104702ada164a0799ec11
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/vsphere-csi-driver@sha256:cda4bb2f924e9046cce8ae4cfbb142cef11a102cd20a5e68e4426aae7ae2639e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/vsphere-csi-driver@sha256:2d21e48a7bee00105dc5b970707a580c97d78e01ad964ad5e32094748bab9b94
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/vsphere-csi-driver@sha256:988e71f7cb8e2d7da1d0b6e187652d2f50147d89153dbe2bc1ac7450d51aa0a0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/vsphere-csi-driver@sha256:61cb2ab101747768b0548d14e8286e0574cac93c08d24e84ab4ddcde1389cbf3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/vsphere-csi-driver@sha256:f79f10f70835d4e6d4f5a5bb1e1c8e7dc2f6b84f8ec064f8d82cd174760d3380
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/vsphere-csi-driver@sha256:3a950b2559d6e3fd2b914106aee7701c3847149019eba5ddf4990f8ad0a51fcc
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/vsphere-csi-driver@sha256:ad5cfd8f6f0ad40d3137d24e80c29ac4cd778dfd9a4a4b9ef443dddc37fc0607
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/vsphere-csi-driver@sha256:ba73df2066cb7d6a3b41a04cdd58163f7b0994d558e700c9a78e7c128fbde601
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/vsphere-csi-driver@sha256:f3a79eb22855804720a28868ddeb62f1e3b805e356e8b575e16544d9e253adac
SPDX SBOMhttps://spdx.dev/Documentdhi.io/vsphere-csi-driver@sha256:eb764119290b9bd551b7746dbf24955843f72ef37d1f96c463896ce70c4a8bdf