Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.16-debian-fips-dev, 1.18.16-debian13-fips-dev, 1.18.16-fips-dev

Index digest:

sha256:f3a9a7b8e2553743a906aa41b2d16efff6f378dcf5c953db1b44491e531c97d0

Manifest digest:

sha256:d827e08fc3f1857d318eabb749145b65cf3ad7f05d8d9c80c07e1b819e6f1b53

Size

80.59 MB

Last pushed

4 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1.18-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1.18-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:7051bd2b15d1fb0d6e1a18d9ac80b19dc71e2695c3024484176294fe2cb67aef
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:5c77ba52375df5b4f634ccea2f2938322a5d0986fa89de85a7cfda5d548ccc33
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:074ec6da37f9e47e969679ae03fc5c02ed2a2ddfed526223cb6d64713bc28adb
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:b1abe2fa5390a6742d69c4728d2ad26676d8623e754b79d6ba72793fa246f566
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:583afecba58949287340b4e307444fbbabad2ffc5623d6bf461106a6b4329fc9
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:50f6fb55752e916c8541adf74dbb517de2406b400419777b4fbcc7a2d99ba445
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:d9bc4b1bda49b6102360aa2b6391628fea09fd4985be6721ab99e9d3b8b2a718
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:3c313f797e4d65350d944f9d50cbaa98eb5cf94522f4a38acbd8633ed27ce586
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:9d828c5889e3380b82e33ad9f13e179598d3e9e5de405f60dddb5efa959bd9fb
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:5016dda4a842c87d669852036fb05ed63324e41039195f1e8172b787a846dfa7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:18893c61e2ab593641a7081835d689b5559203d82d462d0264625e265b42bab5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:dae2a4886d24e439be0aaa063aa68e79af6da868841260980c593f8a07e05df1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:cefdeba1299299b5cf61d42ecb032443ea7e384ef58b9974a6e99eb5d241a415
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:88b27613e3eac3e746a0c4749a9eca66ec15eb7eb6a6859c14acecd7a42e2a2e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:880b778590242d0c1f0897f7bcd3e95f4c9c13e654a1042aa19e30c0c8e44264
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:85d5bbd5e954cf0dd22923df64cd0e9c523f86476f378d1afc103afa916e8fae
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:89b882349edb50d2220d02c2bd9fe2325736c65cfbe3103a719389e0af5d36ec