HARDENED
Return
openscap

openscap

latest

OpenSCAP is an open-source toolkit that implements the Security Content Automation Protocol (SCAP) for automated security compliance, vulnerability scanning, and configuration checking. It provides a set of tools and libraries to assess systems against security policies, identify vulnerabilities, and generate reports to ensure compliance with standards like PCI DSS or government regulations.

Getting Started

To pull the image:

docker pull registry.hardened.eu/library/openscap:latest

Verifying Image Signatures

All Hardened B.V. images are signed using cosign. You can verify the signature using the following steps:

Save the public key:

cat >hardened.pub <<EOL
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbxhUFlXkIIbDzdRAR9rc6kDPNb+k
J48lhqqlOMyiq3jkbKXNj2sEFMduFlNh63MrZA59PKf4TjS1AiCrvaFXNA==
-----END PUBLIC KEY-----
EOL

Verify the image signature:

cosign verify --key hardened.pub registry.hardened.eu/library/openscap:latest

The verification will show the signature details and confirm the image’s authenticity.

To verify the SBOM, run the following command:

cosign verify-attestation --type spdxjson --key hardened.pub registry.hardened.eu/library/openscap:latest

To download the SBOM, run the same command and decode it:

cosign verify-attestation --type spdxjson --key hardened.pub registry.hardened.eu/library/openscap:latest | jq -r .payload | base64 -d | jq -r .predicate > openscap-spdx.json

Trademarks

This software is packaged by Hardened B.V. All trademarks are property of their respective owners. Use of these images does not imply any affiliation or endorsement.