Sign inSign up
Tigera Operator

dhi.io/tigera-operator

Tigera Operator 1.41.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.41-debian-fips-dev, 1.41-debian13-fips-dev, 1.41-fips-dev, 1.41.1-debian-fips-dev, 1.41.1-debian13-fips-dev, 1.41.1-fips-dev

Index digest:

sha256:a8db1a155311070603b82df14553d15ebfbf5f8035cf7e7d054a08a7763bda13

Manifest digest:

sha256:38cc677641d0faa8448453ff1f4f446c3463b19a80e3079837593b6c1460e6fc

Size

61.73 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/tigera-operator:1.41-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/tigera-operator:1.41-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/tigera-operator@sha256:332da595da0f184cafd37bab4690f5051561e670ca54dbedd6402be8bffb2b3f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/tigera-operator@sha256:df430b070476f92facba46c90faf0563518e8ced4053ba7c8d6de8c19b3216f3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/tigera-operator@sha256:a86fc0898cc37f707688fdb97f91d6597855818a5311b37a96736f22692a0d7c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/tigera-operator@sha256:88f3772ce8117410ee251bb673aa946d9e6ba53951171a4c136304d14382f87d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/tigera-operator@sha256:001c5b61e0f1c41e515dfdf76d09c491826440d3bb51f75fa093abd0ab1ab307
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/tigera-operator@sha256:5c52c33ee167a07737d7ac972436bfa18ff310a3675d5838b22f1b347041de10
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/tigera-operator@sha256:a5a1fdcf30c5a04cb5b8972a95354cbd87bd3eb188840478a770706306c7639d
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/tigera-operator@sha256:f46862d036ec0f1cbe037b37861a8a0357d83ba837ff416ed1e25cefe237524a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/tigera-operator@sha256:645624c97a305c6579249b6594b8d6d2932f962673d1d289e8b35f50b295a3d7
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/tigera-operator@sha256:2bc016532d9386fcd2d5a3550f797be79d7e7050174a666860771f5702d98931
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/tigera-operator@sha256:845dd958a91746da1ee8184a7dd46201a1bb530fb3393f215328abd0167b7ba3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/tigera-operator@sha256:1c5308f110696cf548182096d7fc6ef138f6438145915f45e176c9f485ea5e9c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/tigera-operator@sha256:d299bbde85bcb0dcae90955a81ef2ae29e4af66a0c995226530904adb590330d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/tigera-operator@sha256:c23d00a702b42a22d7d1aca23bf6e9fa48af3cc07094236a40673b82857a192a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/tigera-operator@sha256:a4b016497cbaa16d5a5b096db402704429f3a53873241a4dee389817a631819b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/tigera-operator@sha256:04f5aea17a621be55d3c1db7b68eae54370ae0150115e4e683839b4074389121
SPDX SBOMhttps://spdx.dev/Documentdhi.io/tigera-operator@sha256:5c90ff1589b188e8729fd4912ae68341ff4940be07457bb9c7891f9405744fff