dhi.io/cloudflared
2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.3-debian-fips-dev, 2026.10.3-debian13-fips-dev, 2026.10.3-fips-dev
sha256:009f9e7e95e29e274f4957c0f3d9b6ad8b521bea7b7a8ab518823027375a4cfb
Manifest digest:sha256:540f020d92ba647249cb750ad4c357ebffef35e02365c4d40c45d11dbba00578
Size
42.63 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloudflared@sha256:93ffd80762538d3dce52b7657b879dd642f76336180234aa21d5a5efe539b8c9 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloudflared@sha256:473d15c98a2792fec44c9f4b979fad1bc76c01dcb09ac983af237929a2d0d3b5 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cloudflared@sha256:8efdfcf8820aef694c10aeda695cbfbb96e75712dffc691886fb623f9b0197db |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloudflared@sha256:3e89ac551c50ef58715daa95bda910308d4e89ea911585cccae617a574dad4ab |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cloudflared@sha256:618cd4a27290bf98444bab7ccac0620ece8ed40d6aa632bdc4fb3b3edf4e4d4f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloudflared@sha256:11dbf364e3335c5249df1e08c0250f7d581aec8a025781a2b1583710ff760c7d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloudflared@sha256:f118a21c5ee85e6cbe41d4f0e38007a4270e5af7d45e6c074ca1298f929bbba3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloudflared@sha256:0008041a5a4ab5f4dec27cd10409196d8493f260300bc3e24b52d962a69b80e0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloudflared@sha256:b78fd92dfc8a6c9e708e33ea873bf2120c1d42a832b7a48bb4937af447f5fe45 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloudflared@sha256:aedf45ed1f87f940663f1668389d8d79433501af7215e040d9aedceae64c5c5f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloudflared@sha256:c632acb0bbdab1ea5ea99b5585c1fd4b8c90f08812fdaa08fda8bf3ddca34019 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloudflared@sha256:5375fb9cc6c9a7a3430a6936fee362ce003244a002969d70628c4dbe828dfa37 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloudflared@sha256:9e35d8fbc40e86610e90a048d3bf0354a618b3a31832f95fc8b547a5799a76a1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloudflared@sha256:c271fd47c2693cfacdd2a73dfb8dccbff3db7c6aba839f5cc1e5f29310165436 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloudflared@sha256:f2317321f37e380a2218cac23f6b2f9b4943c5eeda3a1b9c8004b5731fc484cd |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloudflared@sha256:992d2eb8ac1206dd9ab614c6f86d38412542bd325b24ff4ec054a82b132642df |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloudflared@sha256:8e647fa3cd6adb373254065958c7c797e8ccca6bd16624f6796484d3e6c76f83 |