Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.14-debian-fips-dev, 1.18.14-debian13-fips-dev, 1.18.14-fips-dev

Index digest:

sha256:639f929ce0fcf0808f906e2f4db611d9885762af513c762bda2815bfb49cc075

Manifest digest:

sha256:72c83b99bad98119b12f82a3d3cb8bcd09b642e9d9384bca670cb2f8b1b85a4a

Size

80.57 MB

Last pushed

12 hours ago

Vulnerabilities

0
1
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1.18-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1.18-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:cc6199b1ff1d9e6d242a592fdec622228a9f7befe81d5742ea3ed0139d17dc5d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:543a8752b0ff838af164ef39a88b55aa3b1c00bdc1e7d14fe9936ebb644ca2ea
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:62bdb7e68db2f731840d2d9c3870cd1542410220603c1323544c1b3f0897ff23
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:52a3a1a5348fa8665fef2cc8208a00d5af7bf1b5b2d5ce3c925cb72d7fcf8a80
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:a5f4f05d2f174d03dae85d176094f34514779c50ac2402d89e04790c5f24dcf8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:2304babdec5c3cf0aefeb0039d78551afb4893fa01f0b989762d4c426961c896
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:bd83fa9171124ae7fa22d2904760d2747a821ac2afd3c4823d8cfc07ed30768e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:3cc2ba1a2629936b76ca786a5c2963cf7482ad1c15a8f208e76315cbf423ca4f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:0d72ea0b3f68565d6619f81a87c03e1eec1ffbe20c0219fc429711e6af732c9b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:f2e4215aaf9bc3b132608c53dc96e7cd76a60483b01337ef54d702d3fbeb2c73
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:d4293bf7dc3347296659b440a42866a37425839fd0cf1ce3ddefdd546ac2568e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:a53ceb67f2acb4e5ff08e602f6fc88e97aaee1d6f09a3059d9bc8b199d47f5b1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:52523fcba7b664e4109eb85c7c8ba3cfdf665e25158f3469c30a42bc6a77755e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:eb2667d37efeecd3487a4a8ba9be9d2f22a0080f2fdea0c8766a53739ff089c7
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:adfcdf37eddec489e4c39dc1191ac0808e8c3d73be68fbb9323fcfc87f24613d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:574e64edf5f44165e780751f2defcf99a06c5f30b477161aa4f33b12f8deafeb
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:1ec4280364fdeb2a495c99aa966762dec01d39496da5a62abecda7c0d82d8cc8