dhi.io/cilium-operator
1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.16-debian-fips-dev, 1.18.16-debian13-fips-dev, 1.18.16-fips-dev
sha256:9e6df4b5b247e8645214aea293f96738113325e6327051bcb6440c11457c7fe7
Manifest digest:sha256:b2727983b4c03a241f4c07b8a8da1210dbf43cc5cc523eb50d457331eae791d2
Size
80.57 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cilium-operator:1.18-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cilium-operator:1.18-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cilium-operator@sha256:43ee8263fded3b7f3306da7ef91a7e82a7f6a88a5ff31d7cd24e8fbc6bf220f3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cilium-operator@sha256:e89f0fde6ad79fd92bf5aaa9a00b2056bb28a4cf23914b9ca1a527edcecfa1ac |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cilium-operator@sha256:8fed7810d94580a7461ee80a72f4d32584577e587968dee6946d96a4c1eb5dcf |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cilium-operator@sha256:53fb4534319ed8471c6e32cce2180f006aba384ed72404ea0bcc19e85aa694b6 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cilium-operator@sha256:55b9c9df3901ef8d061817c5b16a257eb78e04c2ff624ade4bc077e9667acb0f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cilium-operator@sha256:b343c8bef67d7660e977842e4f985ebbf4bc654ae8fa7912c21c5075583331aa |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cilium-operator@sha256:cf5fe7ffe28c970717cf091c5cca5f538bc947ea1bff86fd3728261de0af5b66 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cilium-operator@sha256:2c9af9066ec96b8fbd8108db19df2bdbea5a02cec018b1395ef4990d9a979960 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cilium-operator@sha256:a3cd961e8fd5d675b31fb296eb38a6ddd67efd17077b6c028216d8c948de2bb6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cilium-operator@sha256:39476ceb55e9eb76574ac3766d803b82a15e992805408c4de738e1aec3bcc40e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cilium-operator@sha256:6bcdf4d953d191684f6eae55eefef6eb0c8b47689abe2b94fc39be58b417cab2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cilium-operator@sha256:6be7131a44bf07300f7ed79c15fb30e8bb76591b5a932968ea9f44246245c5b1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cilium-operator@sha256:46c1da4c0de7c5a6a28961a20d69a20a869856463206607dcd9efce90855bbcb |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cilium-operator@sha256:38ea7cd33a1b6f2ce7deeee5a80b76b254736b64325c28562ebaaee98a2093cd |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cilium-operator@sha256:129503042cb6fabeb0dfad9f69f62dfb9d3b6bac107f5fce2a524f2c1eaa7de9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cilium-operator@sha256:01b4a9621a3fd5215dddbc2f61a32c66cd299d0e789023c1c3923ced38e3306e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cilium-operator@sha256:5615ef3d97effc80e2387a9ff74681a3659a890bfc25d3caa0c9535ed3c0d027 |