dhi.io/calico-node
3.30-debian13-fips, 3.30-fips, 3.30.6-debian13-fips, 3.30.6-fips
sha256:2b1fc5c3940c85b347b7b2aeb28697d5a0ba6e6e72b2e68fbf798af1ec2952ed
Manifest digest:sha256:7fee56cabf1b2dada3853bbfa9e65893dc3905c9d7313598ec7638cf55e5e76d
Size
58.97 MB
Last pushed
7 days ago
Vulnerabilities
Health
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/calico-node:3.30-debian13-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/calico-node:3.30-debian13-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/calico-node@sha256:555b4cb91229e90f38d12499314bc1941410121a2adafd493aa5b9a80cdff35a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/calico-node@sha256:bf2bbcb9215d993544c5f8430afa2cf3aac8e84d94e3ed3db41861db92ace57c |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/calico-node@sha256:7fe1e9a98f31d299642b00a92d3ce0681ac0bbefe550e0c29b0b5ebebee15e02 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/calico-node@sha256:321850c3f2052364a1a5ffd8eda32e7ffa81878bbca0e3880b2320876b0d7c41 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/calico-node@sha256:5e238ae4c344b3d021ee83bc7852668e7d8e8676f692bea8990ee98d90d9506c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/calico-node@sha256:3f0cdf948804a51b169c0fd49bdcf5cd1c8cb0252b5fbcb387baf46bb13b3d70 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/calico-node@sha256:8db43924dd7a28e1a7c750b11decfce881a39f9fde843ea79ac0d4f1f5db8624 |
| Scout health score v0.1 | https://scout.docker.com/health/v0.1 | dhi.io/calico-node@sha256:7be3f3de067820195e9d4c05da96ab0bef8a55a4ba24ba15287c9840cb165b4a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/calico-node@sha256:0d547ae9154032826efc9c3bbfab2422674b0b511473c6a21c75cc9e1b04ce36 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/calico-node@sha256:c05e7204a8c9029ffbae953bffd36e3c2722aec5bdee75cc202b67350d25b83a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/calico-node@sha256:63928096d64f004ede66558e4c935e9848b13749a41df5728989f5a5d488e27e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/calico-node@sha256:66190cfc61625160234b6245018a9261cb80617048268e9197f276620240f472 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/calico-node@sha256:6ccab3c451847ad56cbc21a435f142ea6c3e506bf00ef2670aeaeb33862d060a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/calico-node@sha256:c663b486ed164d5b0da886bb94b4c0f4f1e4a85a3d47e4b9e0ffb907cd376761 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/calico-node@sha256:8e1f48a05025181e1746a59284cc25f736d0d63fceeee00eda51ed1e7dada691 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/calico-node@sha256:cc00aa381982fb439407024cf8ce03b0defbf9c06f5d8835f99326b969d06462 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/calico-node@sha256:d4c12423156b9306841f41ae245d3d40efbac04f1b2ddc325aaa831df93d279b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/calico-node@sha256:9cae1870b586e5f9aef749dc56ce0fa52c84a57335ea6a9ad2293a543ef37285 |