Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 2.16.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.16-debian-fips-dev, 2.16-debian13-fips-dev, 2.16-fips-dev, 2.16.1-debian-fips-dev, 2.16.1-debian13-fips-dev, 2.16.1-fips-dev

Index digest:

sha256:7aacf2de6ec0cf75a26d09972971a2fe6ccd0d426c9f7f2e24482b194b9772b9

Manifest digest:

sha256:41150e0ad2816ced73f611c1889a5bec3e2b932e00dbf393081a66b76e14fe8b

Size

59.20 MB

Last pushed

6 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active until Jan 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:2d85f02984d7bbf20a5f33028348dcf91b7346584b1b6a844479fd66acd3c37a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:19f5af54cab8ebd4d09a175259cdbd02de42692d59ebc1dc89a3e03b37051389
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:772c26603c5da49c4907a8ad09c8bdfbde836099a891dedf5b3644872aee3345
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:e761037e6672aa0d79766d2f9604e1a28ab05ffe6c4d1975c73f46600d230b3c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:dbed39dc4018fb7c484d76befcd8a583ef255a87b3aa65a0720dc749a7c2c8ce
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:7b0fcaebfec8985698022db0d3ee16d3bdd0d14f81f6dbf6e8ea28a1d6ffff19
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:772434090eeff9165d8d3fa79743fdd5833de03dcb0501729c6932fde00ccc18
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:4d99b603a5c3803e1f301a25e2104d7ebdcaa09c2ab4d0b28a331f34e033091d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:ccb45a6a7f31b3bb747f399fe1f90e210620ed7fd3ac6f1790f282619a94d347
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:2d206e5ef827e312b19b5ad7dad5ef7c535d72e30ddfbb0249b0a618b86a8b99
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:bd8dac4b34ed04063cb35f40b23c67ffc42094281a0bacf2e2603b2eea80195f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:c3a803193183bf7399febfc92cab0451ec7e4ce8bea8c12558893ab5869c2a9e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:3c19c582c0d920583bf96c0faca1bcd401eb5229d3f995716d92a3309cd3a455
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:1713eecfdf9d468437666ff781326f38d713b98af4644f6389709f778ad45965
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:467b1843995d2478c3ccd3b21d1c89254d4f1d7250085f6600fde75a4e2bcff5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:fadcdfb1350382ff6eb211d70e778fda85186cbbc6c4b6303b7499ce5a779426
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:1c1529acf857f7008a930c868631ab85156b860cf5410514c418ad895256f9b3