Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 2.16.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.16-debian-fips-dev, 2.16-debian13-fips-dev, 2.16-fips-dev, 2.16.1-debian-fips-dev, 2.16.1-debian13-fips-dev, 2.16.1-fips-dev

Index digest:

sha256:86e307b288b1ac4b041de52f24722f5e4f20e29894a2c55f2a859d95d9455e0f

Manifest digest:

sha256:bf7e978b5e49704123ad243b2c4c85df43a3df0175039ea7aa6736b6dd2e4cce

Size

59.02 MB

Last pushed

12 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active until Jan 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:9d1d985d22cd3856aefccc1ffab319613d86b5b4f8d8ecd98ee04f16ab9e2ed4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:4bbbc9967f6372a0de95a3d4481c2cb24e101c06ae914a3af659ad2e4258926a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:f74edf9ab84b8b59b14d58597549052296b5fcf6c2c66ce3e91df3f51381d3de
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:d1c39efc71c00e32a6d9cd38db043c214df63a8627f452f2e8f3767e62d444a6
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:e82ae0da8b03bd2f47ff64603d4e536e8ba7460ce466ae483f42115c0d1f7a4c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:dff444e1267e18f3ec25b94f481b21aea2ba3d5903fee4c49784587f6d94e73c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:a778a8024a6711a84801eee2b68a73a7fea2c2d64c43a4a3f4fcc4c5826967fd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:3ded0e3dd91330ab4012579e32b08a1733f7ace6ccacf2ed7601ee9b5a34fe71
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:a9602f9385089710c7622bf7e51cf26cc093b729843a99cae5ed0d934e7d5364
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:99b993f989c51640c4b0ac3343c9560bd33f43a70ff75a988e5582892a16c68d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:d4d1dcaa8eed9e786cfb7505c83a2ce463be5b634c937fa17e2fdd1b3306cdd5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:8b70834ae4a2695bcf52094170c263a4bfe7fc46263c511c40ef72636a7ade44
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:9e8ca2461e2760ee7fc8d5726dc35b3402f09fffc8f157e0aace8fa73c6e805f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:c8ef959e38d672fca5cad6f97fa1ccaaf836135e304ef01913ef23472d33a312
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:b35e1ff93cb6693251ab780a3e68c3c04f1a891d24b12a003b5c41235f1d7cb9
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:fbba1f3ec4fcbcf0dd46c114a598a9d2f38ad49c66b617f32c9f4d54f0aceff5
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:4af79d47725d7981599d8583e6b7fe645cb3371e49987d1aa9646111474dd91b