Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 2.16.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.16-debian-fips-dev, 2.16-debian13-fips-dev, 2.16-fips-dev, 2.16.1-debian-fips-dev, 2.16.1-debian13-fips-dev, 2.16.1-fips-dev

Index digest:

sha256:a954ec9d1dfbfd38ef2693f6cdb71f3869624740b7b1dc5eac6d13d939819fb3

Manifest digest:

sha256:16f3bdfa195787db2a46fa8952e342477f6181292e0a891eaed2e8281195a580

Size

59.20 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active until Jan 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:9dc808098a98a18743e80bd1e84539041bc540235c51c005849d22249df13551
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:644a084462fa1675a989a2ef60e29bdb21db494d796a4e9102b83ae3c8a611a0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:1bfdd960150fb711d5604cc2cce72c2b635ad9b2e0f77d82f60f56659ed9e861
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:e5dd14fcfa29bc1ed0d93df9b23b097dac2cc56abbc6c6a549b9f215f8147825
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:5e677c8bda095cf9175edc32400b7157017f4e02274961c94870026d81d96094
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:5d67fee8d0cbeae8201cffcce286614ae741a75e7678fd0688d5bba30a64078f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:589f1485e7663a9f309b4da254ce3ec11c0437bf205964054eafe0d900aea5c0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:5ed3e03bfbb60b601d286c3f962195cf37b071058cc68bfe89bb54685af2feb8
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:796e9a8d409984fc3fde71f46a8e593de3208506b6e9370210553423191fe325
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:ac24951cba4bad9534240f42e19f2d177377b35f41972901501f1f4651bbe8bf
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:c3e45efc4be2063a95955860e3a8826bbc5dd2b3fc96c2993201a310d61c4b0e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:7a7415db66934c8b15fb75bc69fc59f3423eb21664b6e811953933c0ed721714
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:7ba8a90a3db87a8f03aec6936489054b84094fa4baf518c272d1f63989bf08c3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:5ebdcca8824e80ebea00fd12586d11eee9227f5171156eeb644bbca777c77095
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:5cf29454c0eb30c6ff1184c5cb8fcc718791e4ff8968c16d8e7ffcdddeedf11d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:d543757f57d97e410e308934d563ed29d4a7efcc0737fd4340df7d1299170a5e
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:088ac965d72a8c9c2fc532b8c9e66616bb00cbde9b2cf24821120c3bda20f67d