Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 2.16.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.16-debian-fips-dev, 2.16-debian13-fips-dev, 2.16-fips-dev, 2.16.1-debian-fips-dev, 2.16.1-debian13-fips-dev, 2.16.1-fips-dev

Index digest:

sha256:48c6f749a49e9ee966a23ccbb0f22e6103f1fafeec72a2ca92a06f4aac732711

Manifest digest:

sha256:2806e3f3e7b7344b2ac544786793f8cd19592b36238554f78973b9e2805eee7f

Size

59.20 MB

Last pushed

4 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active until Jan 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:c58fe0cd93eae0308521f5767f9d1e1bfab6a3d413a43c9d89f8aca5b8d4b871
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:885b002f6f5eddf8a166a25fa8330cf31a3f1fbfb4b535ef33349424b14d7914
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:b4e4e4e2a9c5f354ca33f410faed8108beddc3cf9e2ebc25cd557f9202f67d48
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:82ae4670e2727bad87bea560a4a8448ccdca60f52529252925b4a8707fdc1fcf
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:489659f49e1dcda4bc300c1b4e3bf91dcc0894d1a6596ed322ad9f9d57e5378f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:96b0b7f720238a11839db625bd500aeb1e54ab7d9d12fbada0072f3db6838033
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:a409dd70c484534635d9f82067c254513dab2880c0e0ead096d0c34373fb59c4
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:f2316827e6e174bb1f1de2dec1b8c3cdf7fa922197131b2955be776dc474d0fe
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:37d9417cafb8dd244f44d9d38c18165c230f0691925cddfa95c344108baf582c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:5db127884cac3f2890afb7b59a268455db81e95ff0c6b45d0c3faa9101c7db6e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:e38d087f73763c3e3e91ed60c9ebec8b13e7da402be10f3b3d0f0e46a97f078f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:f029de6047645f1168fc095c4577797de35f6a0be2a7ac6c0a795d3153a9a0fe
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:6de249ea79427b2658e72bf49da0d0869ecb0c29d85e2b6d72458fb5c5be4fdd
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:4ca53ec69c274e2e380f58bb99ceb41dc2ae03b68c7101ff3f494646380a6ef6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:7d5fe8ecb8e6da040502abff907a5c419d15f8ab06195524bfa4422b36e5c87d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:f5b891613a39a0d335ebd2f37a892c93d9e0c1f40488c4097decf280ff8761f1
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:23a1cb4dc37a95f753108ec342f9a9c99c17c0163084c292fb651c29f9ced6e7