Sign inSign up
Piraeus Operator

dhi.io/piraeus-operator

Piraeus Operator 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips, 2-debian13-fips, 2-fips, 2.12-debian-fips, 2.12-debian13-fips, 2.12-fips, 2.12.1-debian-fips, 2.12.1-debian13-fips, 2.12.1-fips

Index digest:

sha256:4022ddb4c7872e43b3ed4e5960f44f61b3e4c8411cab222c4b634214cca45c56

Manifest digest:

sha256:9b4decec22b705e00ce3736322166744bfd866a3ddf71d5cea717f5bf27369b8

Size

33.79 MB

Last pushed

13 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/piraeus-operator:2-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/piraeus-operator:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/piraeus-operator@sha256:8f7a956cf6c64f8c7df1929e6d99fe25a1266b643a4258168c8f312a432ff9e3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/piraeus-operator@sha256:8925149c01d8b37bd554538cd5ba66e267ca07fe4e409813b935cfe3d13c920b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/piraeus-operator@sha256:2baa2d77b072fdabe782fe0a61e8e5a27114b21e616056cd499739de35c008a4
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/piraeus-operator@sha256:eb865e9b47872c8835617bf4debe68ed19c88e16bf4d59b924ce6e3573abc7c9
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/piraeus-operator@sha256:e342c632ec842caf1318ff9cc25ada515c909d462752a4124aafd6e89e162d96
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/piraeus-operator@sha256:562082dbef7da9465a13477969a828559c3580b95843736fbeab471b25999e57
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/piraeus-operator@sha256:84fae762cdee4e2800664ef9c48a1c2b9aa32fa384a9f1cae388d5b5d44ebd31
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/piraeus-operator@sha256:3ef727375f538575b39364362b2d2d4f0bb7c8471c5ffe08988441e5529da6ce
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/piraeus-operator@sha256:fc21de2cf9a7412a9eab5b8b88d0f880d3d85c4873a75c8018c8f5bffc915e87
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/piraeus-operator@sha256:b2edb4e729c9391b4cf5dc352e315a6161e1dd4662379c5d19355bb423e6fc0f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/piraeus-operator@sha256:373fd60eac530628f23efcfbc4008de7acd6854b3c83f354ad716a8dd106c023
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/piraeus-operator@sha256:5405c2bd819012a8919fa7a884a7d4744d923a2ff52b2fc67bf29358b7b418ab
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/piraeus-operator@sha256:aa8e3176036edf68127b12662c426af96ddf4b5671d22a48c0bc071c17cd10e2
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/piraeus-operator@sha256:4d781d11098b7bf24960d03e338b8649568236dcb09ec9508eee2e464012dce6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/piraeus-operator@sha256:f7a8728f70981c7f700ed7e9ae21392b1eb26af16c0908e438b13056c3124a00
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/piraeus-operator@sha256:8d00d02d3df90ec27e6ae9f8786cdebdf07bd3ff80197e01f46424f949bfbbbc
SPDX SBOMhttps://spdx.dev/Documentdhi.io/piraeus-operator@sha256:8468637c97f8fa5bedead1e8224e4f30e166359d5ff12679c729dfbfed2d2078