Rust

dhi.io/rust

Rust 1.x

CIS
linux/amd64
debian 13
Tags:

1, 1-debian, 1-debian13, 1.97, 1.97-debian, 1.97-debian13, 1.97.1, 1.97.1-debian, 1.97.1-debian13

Index digest:

sha256:d1dfb60ebcc07fdd2f32cbebc503133b6920418da3c732a8a70432f01a973e16

Manifest digest:

sha256:9b6be232f177c62a83eee066af46b1950459990e29fb6bc7555b7f29a532a9e6

Size

342.75 MB

Last pushed

7 days ago

Vulnerabilities

2
2
2
16
3

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/rust:1

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/rust:1 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/rust@sha256:08be53470f45039f1df7f8b42eeecd9a00790feb3b98806181a00cc53dabe638
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/rust@sha256:1fd101ae587a4da4fb8cd0da3af635ac0257097ea0adb7eb08d0c8d6b4a4f059
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/rust@sha256:39eaf9d59acbd5d72aa7c7d337b631cec77ccea0a80c2077865ea79b405df35a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/rust@sha256:7cd89c969e260855b1072abe0b068f884e4b402a191bd36d00694e1bb680141c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/rust@sha256:6d47a28efe228b2fc3259db4598e445f3d7f73d2b3fee75ef65618724df85431
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/rust@sha256:a550c446bb11d0c18912570bd5585594a2029c3f43189290cbbe1fda9a90ee1c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/rust@sha256:a505f42153f9c6d4d11e6ee6ebf2464fe89c4f7479d9f2371027b2620e8ff607
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/rust@sha256:017eb7492b6768477d5c07967d1ec933e2758f3eab01caefecd40715aa360032
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/rust@sha256:1b06e6cae0cff8d1973c5778239df0d9b270e4358141e8bd212d23d0355b0c62
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/rust@sha256:88cb26d38e1880ee768fe795004396fbddf42690377eee587047d7582d4da7a5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/rust@sha256:812a4c7b857aeead35a85736b9a95e6f804a41425ce24293a36c50fda0e59800
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/rust@sha256:5c86b0fd51786f96ec8e16362a584f2687f47431ca0334840caae4ea1e841d54
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/rust@sha256:5bd50ec83d96841ceaffb8b71526b8c04704bdc13cde3fd806759395528afb66
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/rust@sha256:d485592fd7725d1602cbbf76475225574c2c030eeb15a74be68e549ce01c3a84
SPDX SBOMhttps://spdx.dev/Documentdhi.io/rust@sha256:44b958b2d8f2439f31e9658279f7d308b6606a2ec0f9bad6df8df4dac164a5c7