dhi.io/cilium-operator
1-debian-fips, 1-debian13-fips, 1-fips, 1.20-debian-fips, 1.20-debian13-fips, 1.20-fips, 1.20.2-debian-fips, 1.20.2-debian13-fips, 1.20.2-fips
sha256:d41f59869e65aab071684f6058c323e82ca3489c3e4b58dc49b4d38b27f2d6bc
Manifest digest:sha256:07d4832f7dbdf59739b68173aad6737f46972c7b8289bc0256b39aa865b86c5c
Size
39.84 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cilium-operator:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cilium-operator:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cilium-operator@sha256:de3e7818794bb3d58052041a2de582a3726564e08c8703e0d58b0942907e6d25 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cilium-operator@sha256:1b3188046b11d285f27d4e67774fe7bb2a4588d3db7caf39283193ec889c946e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cilium-operator@sha256:3a2a4f151049a56f6a651d6fd054a7f11cfa1491b4ff0ee08d713ec7f89e9552 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cilium-operator@sha256:88075ee583fde51c5fa565ea5d602e452689dd507164f7eb506a82b4dba4d1e7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cilium-operator@sha256:0c315689099c37a7bcd0e2f5f54da95c267888df3ed21fc0f520b544bbaa0349 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cilium-operator@sha256:0aae30aa93efb6599c8f913326ba3fe1e5b59a0e2d8a0935b231a4df08c06eaf |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cilium-operator@sha256:0fff1084a090f970581d8d5dc47231daffd7b941179de550bca07bb3aa4649de |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cilium-operator@sha256:d3ba8818e879b55b12d2f098dd01004a4d77c610aa38f1d063d603669793bde1 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cilium-operator@sha256:9f615627dc716ad933c563eef63ef32e89cb3a1102b1859c4b620f44735a6352 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cilium-operator@sha256:860934158417fc481f46ac8e2754f48d5a06ed2b5128c91f33a45dada66a7fd9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cilium-operator@sha256:e38001981c1b9ae6df6d535ebd5369c7169470b27bde21a80e80e952b7b1d1cd |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cilium-operator@sha256:61a6f679748cecce46e3c918060f608121c835171f5448e124fc72250de55cac |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cilium-operator@sha256:cc2a6f448ef0368075d4105b4a6604242c1584b0863e352d531bdea05ae1a1bc |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cilium-operator@sha256:3dde7321208bfaf19d5bf2da308d2e4dd2828701065fcf8c937bd3cbdfa4651e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cilium-operator@sha256:2ba24871a72970cee3e9f21bbc22abc78110ee5206928771afbe61e310388e69 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cilium-operator@sha256:e4542ecf8a8c8b2bbc2ecc95336aade849273e54a855a5bad527c26ee2e3fcff |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cilium-operator@sha256:dcf1dfd038d217932a6a9e59c65a3e16f45ebd4085022fa1d5fab0f2fcfe52a5 |