Sign inSign up
Tigera Operator

dhi.io/tigera-operator

Tigera Operator 1.41.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.41-debian-fips-dev, 1.41-debian13-fips-dev, 1.41-fips-dev, 1.41.1-debian-fips-dev, 1.41.1-debian13-fips-dev, 1.41.1-fips-dev

Index digest:

sha256:16bdbfd102ae77221aa2a54216894c5379bf7314be5dd9bf9bc0fee8f6a1d974

Manifest digest:

sha256:05a535de90b932414113b4ae6d4ccf69a77f8ab6ebac412f110e7796d67ac2af

Size

61.76 MB

Last pushed

6 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/tigera-operator:1.41-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/tigera-operator:1.41-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/tigera-operator@sha256:4d968f106d895adcaa11c9c9fbe8eae2fea031042c89c8c05afac7f51ef7b5e0
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/tigera-operator@sha256:7b161623acaadab9e48bfdf234ea5b8fc0542e467bc389c7d43a718949ef1579
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/tigera-operator@sha256:a8bd3327bff3da593907556086cfdee7e0012f3e154304c1e5f3b9b7655f6db4
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/tigera-operator@sha256:982d53bc9184a21fc1bdffa2adacc19b589a8528fba5aa259e5714b99512cfc4
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/tigera-operator@sha256:37254259966aad0b53db3b9818937cd4db9794ecb3a9005b2099f42974cfb081
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/tigera-operator@sha256:9e626e71aab00229ee9471a7fc92f405e97402f87967d5f157403004acfde958
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/tigera-operator@sha256:0ab3985b7486dada6b1f77095044fc835b1092de29844c68129499ce70c444a8
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/tigera-operator@sha256:a6b19b49073fec77d01c21136bdfddf592ef91f264439fe1d6d58fcc1cd8550d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/tigera-operator@sha256:1a66dec335d93ddd50d2f72419fd38b4b1821211fc9b58576d90a45fc40d3c5c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/tigera-operator@sha256:0af739e6fe1d15115f47849a234eb7fb2aea909d687248f5d5467193b217e370
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/tigera-operator@sha256:3dccbc80b2dab38d83c13270fc3243567724457f0c6a8dec4945bd89cb5cd0b8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/tigera-operator@sha256:d5e4d34b646439f5ded1ab3d566df8d814aee3080f646c105d7275d46e8ca9fe
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/tigera-operator@sha256:c254cd8a9459a2e7c95a9ae7a1d833eab050bf35621b4b647247b4933539960a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/tigera-operator@sha256:fdcbbd5b3119387b7fdbddedd84ff6cf6cc446a0ff67b481229494094e043128
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/tigera-operator@sha256:394ace29831e314db5a8ff5f766433a9ba1ddca7603408eb29a6612d144fc9ea
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/tigera-operator@sha256:652b8f3b8573f239c096a10cdbd64ab3e70f79148fd45fc3a0c2b770c3de8004
SPDX SBOMhttps://spdx.dev/Documentdhi.io/tigera-operator@sha256:25404facd581a25387378bca273ded6248ff78d9f1e11100ff9cf05721af99bd