Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.20-debian-fips-dev, 1.20-debian13-fips-dev, 1.20-fips-dev, 1.20.4-debian-fips-dev, 1.20.4-debian13-fips-dev, 1.20.4-fips-dev

Index digest:

sha256:ec59c202a3c063473b39c7aec103de1612a6ec5d1815c1555421980690f35d89

Manifest digest:

sha256:a2df46353ab557ac6553cee289fd00bb5a3349ab8fdbc93b42930bd777fcfa57

Size

86.76 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:58aaa2e4980166883fa33a8fcc7acc79c44482f4dd23f4038a4036c5c74c374e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:f9d8dd9b592530dc8a6ae89441ff672a40b314c22b25086ac84164ea54660d06
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:0fb1ea7aa6a84e6faccfce6c8b8aaf692470fe23058dac01270c9633268270ca
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:82ae07ffc24c55953cb6cfa9119ba4b9ddf24cd5ffa589293bacda14e9d0351b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:552830878513855745c29135230e1a2bf0e9ae9b1e25109f086dc58f25cf2184
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:e9a45a21557b831b0b23c9b93c0a8f8c964f114a2a179dd3a1bd339b8a7a1eec
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:1c58bb586069e835ad3d35833efc016e6000bbbcacb9028f2c971cb35207179d
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:81918cd9b37dbce1bbe17b9f8bf5cc6f6b7b8a75e71a25bb7092f249ecb722d2
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:0b4efe70cb9302672092b75f5ae2942ac714c8aa83308062bdba85ed9ba73bda
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:327a24d8ccafb472f23028674f733a283d5cf279dd24c9974247f3b64b88e4fb
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:1c9215eba0fe728a2c8a6e99efe147b2ccc43e4ba6c737d9fc929f841904db52
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:010677821b58e247ad30d359023ebd5960358cb7b726434d63b824fcf04ff916
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:8cddcdcf0cbbb13fdf4bb2565f15f168f6fd94b3836f71f1d1cb80051527b568
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:b56a2644ca676339c55c97688a040bb948584003bff36d9e61e4cb6dd9e744f1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:6d0cf1a1ed83687b969335fc6298c6d67d190fa74eb080196d552ac494fba905
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:05c20ef814d61a03e8694ee47f5ced2251c2ab0846f92ddab8c435c7f33f9617
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:8248ad7cd426b6be16043b8f735657c86e868c2081c6c906032b6c2bd41e66cd