Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 2.16.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.16-debian-fips-dev, 2.16-debian13-fips-dev, 2.16-fips-dev, 2.16.1-debian-fips-dev, 2.16.1-debian13-fips-dev, 2.16.1-fips-dev

Index digest:

sha256:1db7f38f6bf1470af4c763866868c2bf3b42635b8e69ab83811ddf4c22a7bebd

Manifest digest:

sha256:81b5e233de9cd0a5e2d80d071d5925a00eb3f5fc09515c8f438b41615182c876

Size

59.02 MB

Last pushed

23 hours ago

Vulnerabilities

0
6
7
26
0

Support

Active until Jan 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:a3ca2ddae7fd5aed1b0585563ec554efad983901de94bc265029420a4e18cf82
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:29c5b7df488bce99a80e530f62978726a96d735427343d8a8bb23230aa70ba8b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:e5e3c5486dcb8b8b71cb56a4abd939fd6f0127c5ee3fc41d88da768a8e3c024b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:6027ebca19e8f06bdbff19f3e8fbc0e6c4cbd9e82b243ec4f0221fc6e2b1284e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:2da7118e61826db7988b74c2ae33de616fdb93f0fccf8f60ffd5b4c5e26990cf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:e77d0570675e57630e34a434300c04230a316ba7d707159b2d4b5356527c0850
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:f734ac3ea833c579f9cb1f22de0e7da0b80d48cc279f7bae40c80654b7fd4ff9
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:ee5751b6c70a37f8b14659dbe1c9b8fa1eb4c7752ed9373ab9f8b297f55888d5
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:622b1a0d857a45ca47b214990ae9d0acdeea30e7541c43f95099ff42e5873019
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:ecd74bc398ac67610610467a78befe73ae7fb52fc80f9ac056c82750aba78f16
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:b01056e43847bdf2a025d28c2e83ab4120a1a754a7bbdf70164778d6f2e73e6a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:b3ee5b9146f15bb1b0cbcb8803964ec265a53d780acca73bc8ad2af6c3b520b7
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:fad507e578a4ef00dc4f53ac75dbd769e93a5181f2306803d76f9e4f498b1916
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:10917285275b607f1d0fea2f61d10f1483349c485b483297fd9e9f2a752c1aff
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:e902b69ba8205389ae4a17293d3ea451006d8a14769181c32cde5db9720035d0
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:cf93e3db4c093eb89056071bacf2981791b637b3258fb71f22dbce1decb96e48
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:b0e290988a5b94630372e6d7b6bc3cb0c7e8374fd7662db941f858d61c9f3e52