dhi.io/cloudflared
2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.0-debian-fips-dev, 2026.10.0-debian13-fips-dev, 2026.10.0-fips-dev
sha256:71c6f27d458267462f776eb97be8bff8858b7bcc340d867b4c71802a5807ac49
Manifest digest:sha256:e4485275411df2344f00803a54e1c27997e26b79e7ce5f05d76ca1d89af94df9
Size
41.99 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloudflared@sha256:d8248e0d5bb3cb2014cad3f57237b0fb2ae73c011043bf94202ff2c56c05541a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloudflared@sha256:67c39aeda12db4380b32a2dbf562ccf92cee7575a0b7a43520a5ed1f8b68f8b9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cloudflared@sha256:33c7dd0f740d1ef74c57c7d474529c17eaf0cc417716214e3685d343b4d93e71 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloudflared@sha256:dd3e26605edc5ba2648543035a0a9232649736cebe1145c8a0a069461bcb0d01 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cloudflared@sha256:649347c6b96fe61489c3ad4b814302cdc8d2abb5d0e53bcacbae424f9835eda6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloudflared@sha256:15f4f45ffc72c75417da385e7ae1f016a90c2fc440a00bf34145fd6c60346bc1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloudflared@sha256:0001880ba1fb796d31181cca4f52c9c8e4ee7f4ab3922c57c9fa58549e1b1cef |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloudflared@sha256:d2f0490756650d8aca7c70d2850db303a22702f7dedabf8a29b27fba07ee3c17 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloudflared@sha256:1d687c7c0cd21aeb4f40ec5dd7c0c12f663ccc7e8ecd02524b1a3bcd8097d5d0 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloudflared@sha256:f5a5e0a822c964e7c7dd1905a0f226fded5cc6e68a5696a1a778e9ee4696e1d5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloudflared@sha256:c284382774856bd2122fc3a43c83c9412305588c7adf51dd0b3699eeee6bd387 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloudflared@sha256:3ca9b073a4b2808320085c638402756ba6d3b8a419395969f21e08b404c2ad83 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloudflared@sha256:dab6e21dcdfb0c397d6e844fa0b9a50b299cd56bb1fdb05d1ece12f727684976 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloudflared@sha256:646cca611be7fbd4e5288e1cca091642eb64e54f51f03c070895a168411a4086 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloudflared@sha256:8bcf51c86a814a4a9902f2c8273b0b535c08d5721292aea8ac7521ae2f73a830 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloudflared@sha256:676d22c8bbf41cf59e10626b10cb1ef59b38a8e61016c4037d6f022ebe06c077 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloudflared@sha256:175c27d09d48657fb2cad59ba352abad077d7214d70731897739c3986f7833f9 |