Sign inSign up
NGINX Ingress Controller

dhi.io/nginx-ingress

Nginx Ingress 5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

5-debian-fips-dev, 5-debian13-fips-dev, 5-fips-dev, 5.7-debian-fips-dev, 5.7-debian13-fips-dev, 5.7-fips-dev, 5.7.0-debian-fips-dev, 5.7.0-debian13-fips-dev, 5.7.0-fips-dev

Index digest:

sha256:bb77b8ade65842d3362ba975ec47b89643fdfaedbb587a3ad18728f0e9b27dd6

Manifest digest:

sha256:b24f08954591e44da4037ebca353c047d5c2da8f66384a76209d1f8d1dd975e5

Size

95.90 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
0
14
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nginx-ingress:5-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nginx-ingress:5-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nginx-ingress@sha256:42ad35bb8f2daa169bbf7dd0026ae13f91e3f4911e46d0bbc598cc827dc35137
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nginx-ingress@sha256:376bf59d0b08187862297056b4078bd799a08d8a168bf679941f4d4ce99b2b06
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nginx-ingress@sha256:3ca36e3558aa2803030f15d5ca4ca9502cb44f175f60174077731c07c30dbf44
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nginx-ingress@sha256:79b10664eb4d7b4257ad239c29cb364ec22765e99f708c7852a06a4527401c8b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nginx-ingress@sha256:fb33674dcff66d87bdb9add04d2c82de3e0aa352554e1d40935b99f68194ec4c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nginx-ingress@sha256:64d17d697346baa08ada283947900afe17cd23456edac987d2128fd2f7ecf842
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nginx-ingress@sha256:42ca5bf9376acc4a35cb420e63f12427d1ec6a2ca3eb43a61af8b8f92459250b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nginx-ingress@sha256:39b7c92f1a781561daa64e16976473c3a2b85abb8b23c1b663ba0808f0ca7d8f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nginx-ingress@sha256:e1af0f8d8a042a2c9c8dfb23bebe8aad2021fe1c0822dd3e75428c0a9efad36b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nginx-ingress@sha256:0ac4ae9c7e1f9af748e4bdfd3877a0c3ae63e5dda16952d19b0e915076f80a9a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nginx-ingress@sha256:711f91eebd117bfa2fdfa941779b86e5abec0916f565c5a189b296275b40517d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nginx-ingress@sha256:70fba498d278b6164a862889b87edc7b68a7c627850f073dbe1dda3420032f5e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nginx-ingress@sha256:3c4f11bdd59d9b8ad9fc09d4f87985d4c12501e08d933584a19980c02b4de655
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nginx-ingress@sha256:dd50226bea9cb458b1f97b75113c46015673293bd4521e2156034349820f7945
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nginx-ingress@sha256:5005f9f440b9bb24545fd7c4b99b53cc831dca0c88c97f893f83892475719364
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nginx-ingress@sha256:bc29e3629b86b06730c5370e90e75c97ffd30b7f11cbdbc3f606d311c24ccdef
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nginx-ingress@sha256:f6d5b63c0b5a517092b0f05391eb91aada4da5b051c2f397d81caf44d3940049