Sign inSign up
NGINX Ingress Controller

dhi.io/nginx-ingress

Nginx Ingress 5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

5-debian-fips-dev, 5-debian13-fips-dev, 5-fips-dev, 5.7-debian-fips-dev, 5.7-debian13-fips-dev, 5.7-fips-dev, 5.7.0-debian-fips-dev, 5.7.0-debian13-fips-dev, 5.7.0-fips-dev

Index digest:

sha256:6265259fa358545badaa16920a36dcb2e5afcc19d198f6405375692cb430775e

Manifest digest:

sha256:58afa342b54f99fecdd417f15f1b3b448261da8376a3f09b81c99a2cf76a993b

Size

95.90 MB

Last pushed

11 hours ago

Vulnerabilities

0
0
0
14
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nginx-ingress:5-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nginx-ingress:5-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nginx-ingress@sha256:2fda4b2510b2fe79c6e08e7433710e7c063786ecb6e74152543f899c6ee0a464
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nginx-ingress@sha256:dcfa26fd7d79fa65f6b029adea9eb5c5d8419c868b2ad060184b0e45c396544f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nginx-ingress@sha256:a256695fe80fbb2d0224bd78d6322f02a7633d691c3a19a147112eb429bcfdfd
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nginx-ingress@sha256:4786a830e1bca31bf453547c7ddd773898757e5727983e6ef6e0a6a71b2e7d89
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nginx-ingress@sha256:e1982f86b8d2c0bb4b171c7a057cb5985867b6f3ce4ba63dc98619dd31db977a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nginx-ingress@sha256:1a5223855fee2291fe673cf9a9cc1f501be2d15db43759cc2fe28a380cf6081e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nginx-ingress@sha256:5307543fb5ab703b6614c6cc71bea3b4004231280864c917c22d2dadbf97113a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nginx-ingress@sha256:7f148b11d755dba04f0ca451cc37616ac7f7e7f865e626946c7deebdc14693a8
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nginx-ingress@sha256:6cc6d8838e2a34c20655593c29d8b9f7dfbf1387725baa1e4629cb38940def0a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nginx-ingress@sha256:54bd1a146c8966f5348c0051bb2c44e25472ba3d085f2e0e37f75b01f738173e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nginx-ingress@sha256:1bab2cd814101db95163c9988cb794e3f375d4463a516ef93b81ccd3301772a6
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nginx-ingress@sha256:3a3c1e548945c0635694d98b6771e4f17b45b36cc1c236e2d3a88b2735762847
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nginx-ingress@sha256:628d614be63a8278859e99ed4c756faeeeb642cc452b439860c747b9c296e093
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nginx-ingress@sha256:adf204a20592740f84cb46385289ff06dd012df94cd0bbbd1aac1dd225849ec2
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nginx-ingress@sha256:ed194095041681b9bf8fa942cf70cfa0f764398a9fe2f2f1f9b48df20e7c3179
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nginx-ingress@sha256:eea71f7d86fac2339286753d111dfcb7a263fd7ec87374f37d509ee9fcf3664f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nginx-ingress@sha256:5a8e9166e6a37d3614f5901e49807ddb9ea23edd6ace2c739852e5ec387562c3