Sign inSign up
Cilium startup script

dhi.io/cilium-startup-script

cilium-startup-script (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.20261002-debian-fips, 0.20261002-debian13-fips, 0.20261002-fips

Index digest:

sha256:2f3c8175c87ff7268ddaf3c33cbd582b87b3ce224b3cb3c674a4688ebb45662e

Manifest digest:

sha256:02170951e4338a39f8fef09e4d4f1cb4782a922efd38538c6f0e57ab0ca0a1c9

Size

16.73 MB

Last pushed

15 hours ago

Vulnerabilities

0
1
0
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-startup-script:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-startup-script:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-startup-script@sha256:f5b72199b6a138130f2b58f35f74cea9b4c91e9ee6dfb54c491ad473293dc66d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-startup-script@sha256:60b0154a47deecd467f67722694e2319d3e284fdbffa86c1baf870903c86b68e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-startup-script@sha256:49eebf77bbf2c57860929bc8b2af10a2d47d75eefe3fdd5ec4aba912a45d5c9e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-startup-script@sha256:d21c09fa00bc02469be69223cf79b414ad00bf91b6114c0ea3aa7ad90ed3eea5
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-startup-script@sha256:e9bf3b883451ba0de269204f559eb0161a1b9edc2ffaffcb9e07f7c8ce1e071e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-startup-script@sha256:4d49066a531708fa1f8ad8c303d9657d3a16b9c0cd7c65b953f67b5d62d818db
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-startup-script@sha256:31bbf32da0fd3a94c4d1604f874633dc29bd9140f6f32364552dd3e80875b95b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-startup-script@sha256:44fe542c15d1d3fe528feafae8b02a3b61e5b3363015e74636812664e45023c6
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-startup-script@sha256:8be1e8a0f83108ee31481c5da92358b770fe9be327c33507b6dbed71a0d831d0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-startup-script@sha256:2121b420c3ad4535afed391fd320c0129340f2f15c39fec78885a62037fbb3e2
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-startup-script@sha256:5574f0be9841ef828658498ba1a576eee4038ca0c294dc27eff6e0944806a139
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-startup-script@sha256:7210558e37a723f428f666d94deedd5125d47f6f4006c15341a03cc187e10ecd
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-startup-script@sha256:4fc2ff687bf7e72e67731dc354f068f0a2b8e9dd930a31eb000123016b5d425e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-startup-script@sha256:3eaab28d923447bd3088dd82fdaadbb3b807dc21145cc84258bae27eb9d0717c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-startup-script@sha256:ba5618ace27f9b32a5fd15fdb7f3741544153abcae7c07157393e0ee3d6fc0d0
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-startup-script@sha256:807ad6ca97bc6f055adc2eb8873814a11648ba7b40847eddfcbaf0e2b512aac8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-startup-script@sha256:2894f62ec6817c5a457c527b65f2f1f7a476d1e04fb87f0a2ab2b690267154ae