Sign inSign up
cloudflared

dhi.io/cloudflared

cloudflared 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.5-debian-fips-dev, 2026.10.5-debian13-fips-dev, 2026.10.5-fips-dev

Index digest:

sha256:d273ccc9cdd2d4ac7bb759c20520940e35545de17874789f088b3aa2a54b19ec

Manifest digest:

sha256:43d80d3723501725c1feb4fc299a0a14bc9e7b2bb1cdddbf239ca795ea7e05ae

Size

42.65 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cloudflared@sha256:5812eb06d06c74101d43fbf6e90cff98fcee8464ea2afaa9a99e3ef50f0a38a3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cloudflared@sha256:9168dceb213d7b58dba956ea5adcc3b6608a8edef81286c4f660f68ef5a6d0f7
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cloudflared@sha256:c4504036ac7aa2b38a9cedf2b9c9717061008548b9aee1dd55fb9c6c38872975
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cloudflared@sha256:082786111cea86b8161b52f584f9a15622f11fe6a231cdf2d3fe99c9e14e82a6
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cloudflared@sha256:53c3575d7e550dcbeb7824dc2b104a536346ca69d1f91fa8d2ec8194875e56ca
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cloudflared@sha256:e57822502f42ba42c8c182b4fb35567336c9593fd83004f418363854a145ff66
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cloudflared@sha256:8dff5ed6bd5344d13cb20858ae1c7f87e54fc8321e081762c37f1a2235dd5688
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cloudflared@sha256:ad478f4a07d400793728b2606bbf91dc3c2939db58a4001ea806ab911b943001
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cloudflared@sha256:91eda4071302adafddd5039926e00a83f9df4c35c82494bf2b377cda148821c2
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cloudflared@sha256:5d911b3671efeba6d33e9ba1f41305866d32d0bcfc699be198977ce487ef8e72
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cloudflared@sha256:c78851c051e811c3589f46292e8fdd33b46021b4011c23a148ca008822db79bb
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cloudflared@sha256:3a61ff394a8377bad94baeceb1ee5234bfdf480f7182526746707c6542103873
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cloudflared@sha256:a0aca86738894339a0998c4a10266f3956323d51c90e0a7c3fa28f6c99fda78a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cloudflared@sha256:eec6f796a99e942321b878a5f53f0155ef24772a3b79f30a1c07f219fa4e69e7
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cloudflared@sha256:5b45f9481f26b7af29fddf55a9a17234bc644e2dc1fe0cfc3e265980c55f79a1
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cloudflared@sha256:9a2b403641c5fb92de9d070c7cbdc7d839dcbf6dedf2ed486ece1843c5dcce14
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cloudflared@sha256:ff9e3b470c5694b76903b63b226f2bb3889298192294387331a7a3a6a6bb929b