Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.19-debian-fips-dev, 1.19-debian13-fips-dev, 1.19-fips-dev, 1.19.10-debian-fips-dev, 1.19.10-debian13-fips-dev, 1.19.10-fips-dev

Index digest:

sha256:6bcee09f3c54c77f3e3af19f60980392905a78be5ffb38517bebff084eaa7854

Manifest digest:

sha256:9c4dde1ec74ae15823215e065d8e891018434ba087626eb2604d6fb0f7d04dfd

Size

81.23 MB

Last pushed

11 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1.19-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1.19-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:58f9235c2bd984119e15192fc7ff642575bdc3d4036335a29d435299e0f365ba
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:0dd481bc0ed7e7c5bb681d37ec4074e59ff5d8230dd4a1e850c2eb388a1fbb13
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:6134068a5dae326323af17340f4fbb73d7b3456bd8e12f54130b41ec4d1e8381
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:43f6056e3ac5a61de1e1593ceb24e9f4043a1cf451678a1430c6a625a8a4b686
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:81acef233ed939f9b1644bd5cd4f0e51a716487416138bb97903a9c19826d666
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:cb49959eac8c1b4a134194ab1d4f9f89d65aa3cdf6f52d3e703cd64fb6b87b78
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:b9adfd1bfc673023edf71be350563ec429748492069804158acc127db5fd14d1
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:8ba18d0fe53ffe3b0023a6eadda4c71eb47eb4b74969690b6e00f5d2e24de425
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:1baa550e085b982175243584be941e9612082a4c84f8002c0a58feda290ca24c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:92a214a9d847b5000f351745760bba0f9c67c8623321456ac0c91d5e539947c6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:51e9e4e94ac860b7991fb4d2340a6ed78ce0a409c94b91c997617a69566e1db1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:2f0162dc21bd75aecce2abf3967f2276bf26d06c78a400dfea96e33de4811601
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:ee3eaab724a34b62d5c3f1c25b6b8a39e07d7d616556cfd45bd6a9c3198f7cae
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:bf2776de13a81bc4b4085a3ab7f0e7b73e6270a241e6b6abefe7d3da07e106bd
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:ab0fc03f537116f6b10f030147615508c0e13558edbb6cf4172d2dc93b032003
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:c8d88260a6f4166aad7387b2f0784a589bbabe1a8536d3b2dea66485e3d89d11
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:b8b42b4285ede9c35b2c9b7cf96d1611cec11cab60dda8722b1a345cacf6ed4a