Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.20-debian-fips-dev, 1.20-debian13-fips-dev, 1.20-fips-dev, 1.20.4-debian-fips-dev, 1.20.4-debian13-fips-dev, 1.20.4-fips-dev

Index digest:

sha256:f6c9c7be6d704f2f73e4e511b4fc2a81529203198361d9ffa3e90189fe488fa1

Manifest digest:

sha256:aa7c86df725e1620a08c69929b10e8c815b9607c090a597d0004fdc3817d306f

Size

86.83 MB

Last pushed

27 minutes ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:f2752aa80b7eba76c83b5fca7f5e6eefefaf093b66c8c459485a40f67dbc856e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:2e714f8f0618f7dab1f212479a1075f64e6cad3bf87dd7eb8c3d722e8b9d21f9
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:dc740c1e481696996edd9f48b3cb1bb0f9856b8394cf65ab5d11a0bd5d53c8e1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:26b056f72019f2e92879c3f0cac8abe7d263a7288d0e331cade71f933451bdcd
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:5a07e3b84e7494a2c49d3a8395800d4c48de37ee780267b327cc6cdb770bfcdb
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:f5f15bd191e4fa9b7b69cb74b925984fc7699c77691bcd6ef5a2696e4f6e68b1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:1a660621a614c558708647426a363382d1270a40dcc3032e215a8f055e46506a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:042006ed1a7b96712327d029c3360eef2b51109b79174f373a7633ea42641929
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:b0291271928b3389465e14af7c7855d255414dd65192e2bf59deccfddea8f8b6
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:13e31b80cc60bfd4f3eb185af8a6aff99ab7edebb7fcf1da87790c47f62c21a8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:35cfd77fbdb44fc8e854a208137635bab41c21b67093726756a6e6cc6ae5e2aa
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:ebd26c4bd6f6fb9bd5cccd1bc3b38761d558d43ae11f5c8981f9f100fcff7813
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:3aeecebeb1643945bc732a46e8084ab4b40519f842062e31bf1d2e1b4f258bf9
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:510a21761e097f00de5c5c064594b7d943344e621ff990ad9c5399f605668d34
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:aedd530464917afb773385a8afd7dd0d9274bcb04133cdc07978e39c9abb4e2b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:285aeb254d1d86570eca11be40895d63c2196531ae85ec342a1773dda74679b8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:ec1865045dcca31c6b9cbbbfd72b015776295bcac3fcab2bf3f6b12ed791eae6