Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 3.5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.5-debian-fips-dev, 3.5-debian13-fips-dev, 3.5-fips-dev, 3.5.0-debian-fips-dev, 3.5.0-debian13-fips-dev, 3.5.0-fips-dev

Index digest:

sha256:d44836388e0236e91254ae44acd5f143182bdb38088f411af705a0b8565c9886

Manifest digest:

sha256:efd31bdab8dcf700fc40d6d8001a824e5f71c3c9b27f16278f3f9363803ecccc

Size

60.98 MB

Last pushed

11 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:cf308b0ab613cb80589fbdac33c1f6f57f1e8843e82d6a3a8ba568392241e823
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:fbda70c4d7eacd3b0d5fd0cbdcf7bdf7df61cf738968b77cc22f781f7b780956
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:d0343342f50c5596a29a6858ba49110c7cccfaac85050d817f3c224dee0268fe
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:d0b40549ca9a90e23b35e7389fa6e54f25639d9d0e8559cfa02a961a79fd3f61
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:b08e86a06694c8bcdc2775b1d5e8e302abd6f4c073be2102efe6a7382cd34cb6
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:95746a338de11c517a482b830715f4a0fc010ee67768c9e2154ebffe783abaf2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:01e90ff03f9b1d72b775d9cf12f6f442f5f2d23ab0228eef20047d17d9453fbc
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:d49e307f0765ea74a728ec22ba2d7bd19d98275b4fdf008da5624e1929e1ac9a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:9ddee034b02f20660e93c0fce14ee998bec05079151894ec7ea55e76256c9a46
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:db3d00452f5a9c0f8651ec9313e048891dde2c149db67483d82d82cb35534adb
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:339bd12ee14571b7c272845599000e2fdb835e24f5945396c916cebf2d3b1f6e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:0ec7cbe8f807923616dcb89fe40f4de58378db50c3d7793bb25a1478d6182e85
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:f957bff02f30ac4afe03e0a6d1d1bac120d1e5be1414596ea2f1a89bc965c360
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:d94748d9641094a651994a3d76587eb93065397d995b5cc7806497fa671bccb3
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:1b542bd036bcacc67a737b393bcfe84a7cb57e00ad43e9e17421198d155356d9
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:37a7b76239ce38ca75a6c5fe66e198f976f03c2764b6851868d6a01cdb343124
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:ae24352a6dc7f64f0e685e1f6fecd8a5c50293713470662a351cfea4a3dc5869