Moby Client 0.5.0: New endpoint for image attestations
securityengineer
feature
The Moby client has released version 0.5.0, introducing a new `/images/{name}/attestations` endpoint. This feature allows users to retrieve in-toto attestation statements, including SLSA provenance and SPDX SBOM, directly from the Docker daemon. This change benefits developers and security teams by streamlining the process of accessing critical image metadata, reducing the need for extra registry calls.
Read the original announcement →
https://github.com/moby/moby/releases/tag/client/v0.5.0
Related releases
- Docker Compose v5.5.0 Overhauls Image Digest Reconciliation Docker Compose Releases ·
- Docker Engine (moby/moby) v25.0.17 Patch Release Addresses Multiple CVEs Docker Engine Releases ·
- Moby Project v25.0.16 Patches CVEs and Fixes Image Store Bug Docker Engine Releases ·
- Docker Engine 29.7.2 addresses panics, image pull regressions, and networking issues Docker Engine Releases ·
- Docker Compose v5.4.0 enhances resource reconciliation and fixes bugs Docker Compose Releases ·
- Docker v29.7.1 addresses image pull and CopyToContainer regressions Docker Engine Releases ·