Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.16-debian-fips-dev, 1.18.16-debian13-fips-dev, 1.18.16-fips-dev

Index digest:

sha256:714192cb52c65bc5e0bd9181867ed7a6fa183a849a2927478a347190665e81ca

Manifest digest:

sha256:babfd1fecda5cdc86f1ac71cda45e822d63091298c29d7c39497ea369a575ca4

Size

80.59 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1.18-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1.18-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:124ca99f059e266d3c78e5cc7c651130ce49f519109c1d9f51d4711cc8e5a4c8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:d3cd2e9590e17cfc8018b1e1d204d9a75ea2d05d230bc0c4902df8c7e7e4c776
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:fd94c0dedc07eea97753a037cfc434ac7b2aba3acccabe37f1cf56281f69fe38
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:d83e9d272695e8a2e6d620559f7e2f896137b02b44deaa71a0aa195e0aa7a58b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:34a26e71718b067d8bb8eee4d0f67be3c1556fb7a2befc889b7e04479c164f18
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:589f450e150c09164bb3a52e9e9afde58cb0b2454fd97783280ff1e94e0babff
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:52cdfea8ef66c6f8522e4e304ce82ea0a6bf4f6f00d65ccc7ccb983c72bfe38d
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:26ddbf40ae2f8c4992c5e5a8727ad8557297390c9002158e36350e3f0219d6cd
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:e05cd6f274fc608e8ba3742f54cbcf2722c6fd66ad56bbffa8f65a6ea8373fd8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:ac5fbb48632866937625076982891ec1c1a2ae9cca9c626b002ec28c78ba77a3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:a4e4c36f0b421de75e4db3c652e4857e1434db7161cf8a69077dc99bdfd926ae
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:51e71a1a3f5568f0e729a9748d74f7fd9513a40b3a84d8298977566d57d7e477
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:3589b948bfbfcb02bc62cdcda35ef1cd47e73db929705ab7b1d4648d4e071f8d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:f556ddac187a410849f212d903528a8398ad33030c76f46b383aa40418ef8967
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:41533090e96bf5a4dc89fdde971fdfae947b4e1d4a204fc3d3d7db1ce331b16f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:b579ef73519b70a2ccbcb6ca9701bd4197d99e00bb84997a5e3d7b5fd1ecbc06
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:a0f161caa712879d9c2ecbc3bcb3b650f4ce6518c82fbdaee4f29751043c58ee