Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 3.5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.5-debian-fips-dev, 3.5-debian13-fips-dev, 3.5-fips-dev, 3.5.0-debian-fips-dev, 3.5.0-debian13-fips-dev, 3.5.0-fips-dev

Index digest:

sha256:39474519e7eeb9b9c683eb0f98d889abffc2a0839a053ca7040d591f97665d62

Manifest digest:

sha256:d97d4d904061a36d3ab9d90e7fee49cb0177c0b83bdf32427566b00fc6c7bc74

Size

60.98 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
1
0

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:00c42ac43ac75d4a94d6032ee04ab869be3c3281274c419d8a4a614013b805c3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:2b090caccfa8847a8ad5c9e811a1f94a42d374571009582ea3782fe4c329495d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:82f029fd5bf45f91fcaf290269f454e5167dbac64e5f90fe1ec9612fa9eb70c1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:244655092adbf866832e56d520bb826bf3795da18b830a40883cb81a0b4580e8
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:0e46da82d71fc9cca95c2156e1d63a0b6762932807afa3936425d36f13779f80
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:fb821bb5b03d8ee11ffd2d753ba980d4f2e5aef99ebee1e03c2c0d67a6ffc758
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:cb29ff1c7fec014f19003a08cc823aabb8996be1e4790f83d06a3f82625ed551
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:0e4154d16fbc6599cdd1c60d30379380ea62e821a6a650f87043766dbd50c30c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:c257d7f7c7a0c30935609f9d8c8db7fe2e8fca23e49c4b144dac91e0dc562073
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:eda7a84f6d9ec4f03d94580645cda4d02de8b690f997c52f7027b23d198d9ef4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:485cebf74ccd3da3502ee17c1c6abda20949b548a614860a3f0aef08684886cf
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:7bf815ddefbe0f47c1f91b9742000ea0ff1dcfc1199e5a883c4e9caec8d85a03
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:312a768a3db1d7f20bc3b60afd2152a25ed1f56c0bf97debb44fdeaa42623b80
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:9bc17fd44fe324b56571fb84a9fdcc0233c760335e8c9a0397c2df7e095466ae
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:786ccf3cf42aaa6984b68b33235ad9a4a616f0743730390f098ab9137b09d4b9
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:47d8a9edd0b3e7bfed835cab32e6d769f20fe5282263a2d29b2f2af42df60124
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:a0cbfbba5138246d016eeb351729bf53134b5ed66bf8a655d7bf00445fa070e7