Sign inSign up
MetalLB Speaker

dhi.io/metallb-speaker

MetalLB Speaker 0.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.16-debian-fips, 0.16-debian13-fips, 0.16-fips, 0.16.2-debian-fips, 0.16.2-debian13-fips, 0.16.2-fips

Index digest:

sha256:2331b2612e3868193964c6f4f8ed885c03d306e2fb0969373d521b96605e8848

Manifest digest:

sha256:6b43fb2a80d23f93d36fc37242427030883c8c6f0249d360bd3d0d940bf70b5f

Size

39.95 MB

Last pushed

6 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/metallb-speaker:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/metallb-speaker:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/metallb-speaker@sha256:73ba10711d8d1a4c2356c6fbd9d16bf38cff4dbe50d103ae772f6e6db71a8ffe
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/metallb-speaker@sha256:488eb3eddd95b686a1cc6842263777ff5b607b96459210281b3bcb1f8467b2e1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/metallb-speaker@sha256:f9fde81fee699b3a7c90e54f4007253ed175a84762cde645ecd3c04ea9b8f046
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/metallb-speaker@sha256:7cf256e8541078f941a7b090762f60a463809a7361d6a873cbc1ae1f95dbdd4c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/metallb-speaker@sha256:68f85d4b8528beac1674fc106933aa32c08788047111b63b6f01064a4c2836ed
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/metallb-speaker@sha256:54f57f63a0b597e19cde73faa1fc8d3def5853f7a2b2ceb055ccc67190bfe04b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/metallb-speaker@sha256:b4c9a9c56e69624ec8d99bd0c03cfb79726485fc35668ec1be7f555f089bcf62
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/metallb-speaker@sha256:cdafee1eef8b4d18645f911b922f7aad1d0f107a52e7d63770f8c777ea26f39a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/metallb-speaker@sha256:05802c93f151434e8b4a6485a5b1dd9d543235550c859b81ef0f27ce923af93b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/metallb-speaker@sha256:c55c1e866c6e3cc3db86efe781e0799cbe089c28b6a0565893d5f5d62e9cf055
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/metallb-speaker@sha256:ec52651c9fd9b0ca91a74aa9799ef702f87280fe6fede72d6c2b89cdfcfce0c0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/metallb-speaker@sha256:73e261eee084dbd5c1326b80c33f65d01fbd401c7c8e307e227bef3327836a6e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/metallb-speaker@sha256:1d7ea0f0125970f3ca6b757c380c207b5a8ea9337da8b8fa61f70f9cfb6bbafe
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/metallb-speaker@sha256:43fa5527eab2b38205d3411be24f7d019a6fb7849e7cd61005aadc4de3426975
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/metallb-speaker@sha256:08c4ed0a0767e34640f883be44a6b529b91f8cd4d445949d7c1addeef1de018a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/metallb-speaker@sha256:bd5de187ff355595aa7d8e500ad7b0f5a9e005b40806e995763759b889ce35fa
SPDX SBOMhttps://spdx.dev/Documentdhi.io/metallb-speaker@sha256:8b1400989bf67f977c947c56f2dd3dd7b781875c9ed690dff7435cce806dba74