Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.16-debian-fips-dev, 1.18.16-debian13-fips-dev, 1.18.16-fips-dev

Index digest:

sha256:714192cb52c65bc5e0bd9181867ed7a6fa183a849a2927478a347190665e81ca

Manifest digest:

sha256:babfd1fecda5cdc86f1ac71cda45e822d63091298c29d7c39497ea369a575ca4

Size

80.59 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1.18-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1.18-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:124ca99f059e266d3c78e5cc7c651130ce49f519109c1d9f51d4711cc8e5a4c8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:b941c6b8310f8302ac1c594ca58bb22df22d0b18a48dbdf110d35e8159c376cc
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:fd94c0dedc07eea97753a037cfc434ac7b2aba3acccabe37f1cf56281f69fe38
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:0cd4e065beac9fa5f02b47b9eaefb6edc3f8529010b8fd5b22f0130bbdd17562
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:1357de40f4899437fe2241598a206f9a6b8a541b64d27221441e476eb4218e22
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:7cbbc6a3edcf0399d4e43aa3ff37a2db3183b79b710664a1fc430752d0e3a875
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:6cb665def8d41b1baac6fd3a08de389c13aed620c9de4d4c92c2d71a52943f87
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:26ddbf40ae2f8c4992c5e5a8727ad8557297390c9002158e36350e3f0219d6cd
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:e05cd6f274fc608e8ba3742f54cbcf2722c6fd66ad56bbffa8f65a6ea8373fd8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:ac5fbb48632866937625076982891ec1c1a2ae9cca9c626b002ec28c78ba77a3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:6f3525e3808789afd6c60f5be9566ea293d41cf7e0cff689c3db380d6a7fef7a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:af09f2f63052cafea67176b595d68e2767d478789071b123c3c86d45db3e2281
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:f2dc53d1ed594a4f435c546134dd6c5e2a4d32925e8dcd06fb9bb053c79532ee
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:f556ddac187a410849f212d903528a8398ad33030c76f46b383aa40418ef8967
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:41533090e96bf5a4dc89fdde971fdfae947b4e1d4a204fc3d3d7db1ce331b16f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:23b391eb4222d705eb77bf2cd2ccdb38125141359c0de1171fff7585929237d2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:a0f161caa712879d9c2ecbc3bcb3b650f4ce6518c82fbdaee4f29751043c58ee