dhi.io/tigera-operator
1.41-debian-fips-dev, 1.41-debian13-fips-dev, 1.41-fips-dev, 1.41.1-debian-fips-dev, 1.41.1-debian13-fips-dev, 1.41.1-fips-dev
sha256:16bdbfd102ae77221aa2a54216894c5379bf7314be5dd9bf9bc0fee8f6a1d974
Manifest digest:sha256:05a535de90b932414113b4ae6d4ccf69a77f8ab6ebac412f110e7796d67ac2af
Size
61.76 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/tigera-operator:1.41-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/tigera-operator:1.41-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/tigera-operator@sha256:4d968f106d895adcaa11c9c9fbe8eae2fea031042c89c8c05afac7f51ef7b5e0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/tigera-operator@sha256:7b161623acaadab9e48bfdf234ea5b8fc0542e467bc389c7d43a718949ef1579 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/tigera-operator@sha256:a8bd3327bff3da593907556086cfdee7e0012f3e154304c1e5f3b9b7655f6db4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/tigera-operator@sha256:982d53bc9184a21fc1bdffa2adacc19b589a8528fba5aa259e5714b99512cfc4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/tigera-operator@sha256:37254259966aad0b53db3b9818937cd4db9794ecb3a9005b2099f42974cfb081 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/tigera-operator@sha256:9e626e71aab00229ee9471a7fc92f405e97402f87967d5f157403004acfde958 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/tigera-operator@sha256:0ab3985b7486dada6b1f77095044fc835b1092de29844c68129499ce70c444a8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/tigera-operator@sha256:a6b19b49073fec77d01c21136bdfddf592ef91f264439fe1d6d58fcc1cd8550d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/tigera-operator@sha256:1a66dec335d93ddd50d2f72419fd38b4b1821211fc9b58576d90a45fc40d3c5c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/tigera-operator@sha256:0af739e6fe1d15115f47849a234eb7fb2aea909d687248f5d5467193b217e370 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/tigera-operator@sha256:3dccbc80b2dab38d83c13270fc3243567724457f0c6a8dec4945bd89cb5cd0b8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/tigera-operator@sha256:d5e4d34b646439f5ded1ab3d566df8d814aee3080f646c105d7275d46e8ca9fe |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/tigera-operator@sha256:c254cd8a9459a2e7c95a9ae7a1d833eab050bf35621b4b647247b4933539960a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/tigera-operator@sha256:fdcbbd5b3119387b7fdbddedd84ff6cf6cc446a0ff67b481229494094e043128 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/tigera-operator@sha256:394ace29831e314db5a8ff5f766433a9ba1ddca7603408eb29a6612d144fc9ea |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/tigera-operator@sha256:652b8f3b8573f239c096a10cdbd64ab3e70f79148fd45fc3a0c2b770c3de8004 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/tigera-operator@sha256:25404facd581a25387378bca273ded6248ff78d9f1e11100ff9cf05721af99bd |