Sign inSign up
Cilium

dhi.io/cilium

Cilium 1.19.x (dev)

CIS
linux/amd64
debian 13
Tags:

1.19-debian-dev, 1.19-debian13-dev, 1.19-dev, 1.19.10-debian-dev, 1.19.10-debian13-dev, 1.19.10-dev

Index digest:

sha256:a8d2e6683282e30a437a75e3ac74ccb8dae975ca5c4f532b65cb72ad08c3e5ce

Manifest digest:

sha256:4e3941846480e909b00ad6fc2d125594a0d0d53479307ca89bf0a46edb9de4eb

Size

333.71 MB

Last pushed

13 hours ago

Vulnerabilities

0
0
1
2
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium:1.19-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium:1.19-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium@sha256:93db51a0cb7b879b780dd47d14184970a37db04b701a040afd9f6965c036aa54
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium@sha256:d833fad773ab736a8f532806b70a21b4e273709f5a109839b2886bb0936211da
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium@sha256:56f2b22a8f7aadbed1c34926e43ea9e7ae82a2909748463529459ac9783c783d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium@sha256:42d12e0572b24ab38efaadda5200b5b60096e6aa43393ebe35d1936c2c4a3c29
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium@sha256:e0ab23887825ed77a8dfacce1e10cd672769607efb3cccce46f9f599355d8b98
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium@sha256:77dcd4aac5c1a8af8f522f1a76e06525cd1c66f9f6c06e1b749128f49748809a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium@sha256:8ab65fec4dbe2d705bce62c89c2bee23091493443b84fd72e4da6c8db8643bf6
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium@sha256:b6b5d1cc6ef3baa77d7962c19a29fb60ea54e5f24de314a007012fb5c19c658e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium@sha256:68e888829e81b977b23ce52eb02585d43233640af0361cea15f23f5b6a302ece
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium@sha256:d2db211bdc127503bfbbcdb457c2411d1e049c6b8def18418ffe2bd5b0aec465
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium@sha256:483874958e328940ac6392bd7ce3e2186b7d73a16335d00be1388d9984ffcf57
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium@sha256:065fef60a09c26145e91410541431161a1ff99c649f89e4b1fbd500fc434a8a6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium@sha256:53015419d51ef75f769945e94563f501cf0bc0913e186906657774e23cc4ee69
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium@sha256:bb5f565c02ca73901269f96f0a634d098a28a162187e88ee11458779d35bc9b3
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium@sha256:c3d813e4873705d2636d451d84f9332b9d2a65354e8b16cd39f6f22c0facf8d7