Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 2.16.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.16-debian-fips-dev, 2.16-debian13-fips-dev, 2.16-fips-dev, 2.16.1-debian-fips-dev, 2.16.1-debian13-fips-dev, 2.16.1-fips-dev

Index digest:

sha256:ba5ef40cda763669749de560f72609eb2c42e5574e372b2c403907bd429a6f9a

Manifest digest:

sha256:4cc217f3dd8358ccc5b252eaa4aa89f0a324d0b652271275072e2dbdae481db5

Size

59.20 MB

Last pushed

7 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active until Jan 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:f65607b461edd67a890cb3777ddc85feee6d0cc69185e454e786673868afd537
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:99507218ec86e61ba188583255af8b3d14e9fc8a2fa4bc35107188e6e39c6be7
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:27e0038bc0b8bf871d4998489674a132c8146f19c0e64b08a6d8b0d608a59e02
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:cbdbe54314eefed86f156c1c71225904baff78cc1783854a2c666ff6c65d66e1
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:3f186541ea20cda3f3de190f00b455c7dee88f80343752e76a570f7c3bf3b514
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:7a16d71fddb26e23a570992a85e196e111f3ce7c18058b38fafb3b7daca3fb19
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:b9f5afc74086bc987204a5e35361de6df4e8b95f04baf2a12a92595275a1e50d
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:088cea3364200af1f21723243d10feb7947f39f1a7f744914e420780fa758df3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:cdccb1a2d97070e6c6b8bd94a400b45ab12234faa63d3f43e38430b9ae426743
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:4e14a172819d45bf5a90503d7c57c06dda21e532a9db14a3a0d569d91fb93ef3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:5f93b2a47bebfde9493b16810aa578769b61ff246fe306a80e518a0199a292ee
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:b41a8197b47a86fb6fd3a4c0be9a9ab6880326ab81b710b8dbcf080dc68faec8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:fea79066495c686538e88c4b416c54f4654553e4238d6debc70a6af6504b1d06
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:e1ce54a28f8539bdb184cf405a829776029b070686fc329528a8e9fdb30344d6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:db442da9be7ff95c2bc000c606fc035bbb724313720eb5e4b05f82558f714455
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:43d681caaa0ab242d7f91c6ef8fc0389c5df36eea15af297b7f46044cadf0ddd
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:fecc9f8183134fe36738781b844535b9d63fe23975f16127e8f845a70acf9067