Sign inSign up
cloudflared

dhi.io/cloudflared

cloudflared 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.5-debian-fips-dev, 2026.10.5-debian13-fips-dev, 2026.10.5-fips-dev

Index digest:

sha256:d037b364d71ce2f3f084a69b1f9e2582c7d91abeaa9fac92ad887ca90a678972

Manifest digest:

sha256:a8e8035dfcd7e28b12f79d8bb867bc9ac748d4250bad1223cb7cca332f50ef71

Size

42.65 MB

Last pushed

12 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cloudflared@sha256:32601c4f4628d4b56013da2be8d22571df8e765fae6b2e3f7b70008d2c52993c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cloudflared@sha256:d2ab3526d7ade6dce4e7f4d186ce4c4f012664e88dbbfff3dc53db6dd13d1e8d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cloudflared@sha256:49021caeb4239f52021594dc1b8a11bf1f63621d9052c1d021c460e6ba62f8ad
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cloudflared@sha256:abf6734c30e274f23ab2a1962e9a21c97a0128fbb4a23ecfce173424b543bfa3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cloudflared@sha256:3bb9c835fd1d41c4176c9e047c45af652a2722cbe2df31b9643c620ff76bfafc
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cloudflared@sha256:a30b42edf93af1555a15ec371175a9160abf78810786c15da8e9015f9b543995
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cloudflared@sha256:318f61537f8d9e56b2662f327cef60d21006019a9ebaba4abc98912fa60b2875
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cloudflared@sha256:c75afb7e71519157def074076e636d542a9deed79a33ef3f95a1ce0d78a3890b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cloudflared@sha256:475d44bef3a37edec0c9806b3d044298e641ca55c9e397b9b48574ed9c378c55
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cloudflared@sha256:a0eea71952cdb3f541a993cb7cf5049cff3edd5ae5e1e36354053fda08e6a8b8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cloudflared@sha256:132e14b482330db528dc7544e7f373a4c88d9cc1dd856b244426556a1e8093c1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cloudflared@sha256:8c5166d4d88bde23e5244db84c02a3c3af7b9339eaebb210f4f91c6b1fc5bc88
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cloudflared@sha256:dc91d1179a1f4bce07de84a128bcc4466217be466b4e8ee8354e9dca262636d1
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cloudflared@sha256:5219b57eef4fcd4f879ab463260b7184ec93dadb174d62f3e24251a45d624a18
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cloudflared@sha256:03d43181c279e7d864846d9963dea6af694048a1338fc6a9fb395df69289c7b2
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cloudflared@sha256:5c23a03b7e628047b7c8b921fa4dfe4908067bf74ce46df419a949a856b2afde
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cloudflared@sha256:d035214c529c520a3791f98f42d26001bce134c64d54869f0ea3ae11f81f6e64