Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 3.5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.5-debian-fips-dev, 3.5-debian13-fips-dev, 3.5-fips-dev, 3.5.0-debian-fips-dev, 3.5.0-debian13-fips-dev, 3.5.0-fips-dev

Index digest:

sha256:c5803b5eb95821acb229f18d505eb012236f910eac6d6f2248e3ab520d8f756d

Manifest digest:

sha256:f45fc40d5812c1fbaf00f6d55bbe22ec661e733cee28a9ec122026231d85ab7a

Size

61.12 MB

Last pushed

50 minutes ago

Vulnerabilities

0
0
0
1
5

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:a46a668254a1128d3695a8ad04ce0ff2ace31c5b3c945e7f1a586bc15bfaa08e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:ea024d77b73c6724e970803131db609958ec130271ac204a5aba0476351e5ec0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:b5acde294660e3a9498d20846d142f898cb620b3702ff565476a22a14cb050be
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:721a959244b401afa4887f63ab5e0c9f2edae364f0938dea5da840eddcabde6e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:79890ec4c9a5202a6a4493ed9b6aecae46426418abe9b1e958ea495e17e08e68
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:11bb04addd62153b55b45d0ae8f8fc92c57d02f18ee493e63fab5552cb558b56
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:e565cc81268b148cfc7a71178bfd2cbcb08ef88c742e58f2c7587110e47e92d7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:97ece0ee40eff2d96aeec2b845d33e8850509c1d26f997d79fd2d4c759377888
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:ab37663eb19e678b310bd829689e0c09f46a3f12839201a9a85c5d4967525072
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:5c5850c88034379d9201fbbe4c9ccee3ca5565cb8f7bb1e79ba4f100f52059ab
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:2f115f8094232e3dcf2cfb4fb6c495bc925067bdaaf864082194693a07b4183f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:c681d8c3d0a6434376c5488d51ba44785399ebf2bea26cbe1a816967992b895a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:a45a6bcc3f2b2091dd87f9dddb3cb568756a03f584d6d9ed55d2bd1576d04e98
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:2e4587ad2affcfcd5a5987636892ffafd0b35ccdfc13eb9f52a58479d4d9a212
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:a33a99c7965f7b5d496016532df7631b9985a40dcc2cc5e62d7ee74d7aae1765
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:1617c8617b854ea43d16705793094b681868998e08e2ca8eb760a8ffa7ceccaa
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:2c3e80b59d9327f8115d49212833ee1ca0cb8651b6660711668b7617d7c96e68