Sign inSign up
cloudflared

dhi.io/cloudflared

cloudflared 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.0-debian-fips-dev, 2026.10.0-debian13-fips-dev, 2026.10.0-fips-dev

Index digest:

sha256:71c6f27d458267462f776eb97be8bff8858b7bcc340d867b4c71802a5807ac49

Manifest digest:

sha256:e4485275411df2344f00803a54e1c27997e26b79e7ce5f05d76ca1d89af94df9

Size

41.99 MB

Last pushed

3 days ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cloudflared@sha256:d8248e0d5bb3cb2014cad3f57237b0fb2ae73c011043bf94202ff2c56c05541a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cloudflared@sha256:67c39aeda12db4380b32a2dbf562ccf92cee7575a0b7a43520a5ed1f8b68f8b9
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cloudflared@sha256:33c7dd0f740d1ef74c57c7d474529c17eaf0cc417716214e3685d343b4d93e71
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cloudflared@sha256:dd3e26605edc5ba2648543035a0a9232649736cebe1145c8a0a069461bcb0d01
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cloudflared@sha256:649347c6b96fe61489c3ad4b814302cdc8d2abb5d0e53bcacbae424f9835eda6
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cloudflared@sha256:15f4f45ffc72c75417da385e7ae1f016a90c2fc440a00bf34145fd6c60346bc1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cloudflared@sha256:0001880ba1fb796d31181cca4f52c9c8e4ee7f4ab3922c57c9fa58549e1b1cef
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cloudflared@sha256:d2f0490756650d8aca7c70d2850db303a22702f7dedabf8a29b27fba07ee3c17
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cloudflared@sha256:1d687c7c0cd21aeb4f40ec5dd7c0c12f663ccc7e8ecd02524b1a3bcd8097d5d0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cloudflared@sha256:f5a5e0a822c964e7c7dd1905a0f226fded5cc6e68a5696a1a778e9ee4696e1d5
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cloudflared@sha256:c284382774856bd2122fc3a43c83c9412305588c7adf51dd0b3699eeee6bd387
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cloudflared@sha256:3ca9b073a4b2808320085c638402756ba6d3b8a419395969f21e08b404c2ad83
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cloudflared@sha256:dab6e21dcdfb0c397d6e844fa0b9a50b299cd56bb1fdb05d1ece12f727684976
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cloudflared@sha256:646cca611be7fbd4e5288e1cca091642eb64e54f51f03c070895a168411a4086
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cloudflared@sha256:8bcf51c86a814a4a9902f2c8273b0b535c08d5721292aea8ac7521ae2f73a830
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cloudflared@sha256:676d22c8bbf41cf59e10626b10cb1ef59b38a8e61016c4037d6f022ebe06c077
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cloudflared@sha256:175c27d09d48657fb2cad59ba352abad077d7214d70731897739c3986f7833f9