Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.20-debian-fips-dev, 1.20-debian13-fips-dev, 1.20-fips-dev, 1.20.3-debian-fips-dev, 1.20.3-debian13-fips-dev, 1.20.3-fips-dev

Index digest:

sha256:dea47c19366e14141874c339ec97578d548e94441616aba2c87a3dc4cf8fb995

Manifest digest:

sha256:298134842758983b5a944a1ff97ca08d8089bc930f5a5c050f9b58980d894f31

Size

86.76 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:6ecceed326bb8cdfb568ce5b02bfe31aa095eba077bd73faf8e10f56c771f0e0
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:96db61f69b7e65167545720ffe6b1e56d0e02b6a6694e635b742a557379319a8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:6f94ceccf2ea10f832ee1d9adcb190c602b2d17d41db10267bcebcf02feec4b1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:b04533ec2d0ab539f6564dbf1bd4a3d230f3818f9030a3b8ba62f1094f738b7b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:0d9ed2120c3383aeb19af33408b7d41007bba5eb602536db6a26702f70d27599
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:ac64f3b19f72e0a4fd31a5dbe731e6f86ce8dff6ac2ef99cd3126b0a1fb75d3d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:48d4fe8450a06e072c5480e3ed6388fdeafc94667a778dd5ad70c05118e9d384
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:76d40acfa844bd61913b181a1bd0fd16fb1153a396c8779adfc9c307c99305e0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:89e22a84f216b63f383d0f95ae792e0c1b8f3399055504ae594437abcaa85a80
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:73a734a559f2c49e62989e7ab6789ca2e983506157f6aabdeefb442dd6e1784d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:8bbbeb3ffe5180980fd12d6d26e843ef0b9662362056cd7db03411c03671a2cf
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:eab7c46802dd6dfd185466491d924f5c8eae035d3649f9e80a48b4c2c1e43c3b
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:7eb429abff366636808838ddf109f0854d584c772af65ef0846382438cc99d3e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:da13f961f4d3c148a6d022d54336ab68339b32454cce791c1017a18267d1d224
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:1c9d2ef5df1ad0b92034d2c4b8c9dc07654211b082fb3ead34cd0f9f11091dc4
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:08eee32685b42005cdc6635bd5dec4555168fb937011e795101d7827706065b5
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:1140e3d9e0272031eace03b985d73bd28730e39c34416a3772034803aab7486b