Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.16-debian-fips-dev, 1.18.16-debian13-fips-dev, 1.18.16-fips-dev

Index digest:

sha256:8c7ef1dc79acb969dc0b750cac43e616c290de2d74102d739fc870ed098234d6

Manifest digest:

sha256:fdeea3a17892072c5df59792d025f608a01ed443015a43e525df31a39b076839

Size

80.58 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1.18-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1.18-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:d73c3b0c5658ab229435aafb0ce02a7817943879d78de91dafb4529c3ce8be12
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:dd10725b4bddd92d69ab979ab925bbbe29ecbc89bc5ac30ad7194388032c8357
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:2480869ac0ed2b1d8b0f314cc23b76ddd383dcea647a5091576a835133089600
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:1094014853cb82a401a2b801c19c8ea24e916cd4dffc3b1bc9dd709917ead81e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:28d72f158db23be91aa4f562fe3dae6b22031e4cde9f233ec997b205301b73a2
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:0402edc3f344acfb156bc422ab9bb1a7e1c0aa1dfc80447b2ed9738659b3eefa
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:78b0d267e23f12d179d3056e9ff1cd3a161c6396cfdc6759eba71b2b23533004
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:7113f83d22d3bbd0b928a0bb19d5bedc67a4484ec31ea936dce06908f348cf7c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:21ea386be24f7473db8bcb9e97d8b73a1476f4728b4f87c14918b25b1a0c0cf4
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:8dc32f38aaa8b19f60ebaa1f0db43dc4fc2052643fd257d8ac00b74430262acd
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:b8ea97170d5c451c0823aab73f80e01e0d8aa859aea993a66efe105e2dc044a2
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:5fb68e156b15821fb779c30094d53e0afa9742b572efed637496fda60eace559
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:74037d035cd90696e2af3e52d8c593fb086d13bbaa8cc878a95fa33d3fb360c6
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:df517bd869a532bc6c5641be0753c0129468433be4d0005891bef085c5b165d0
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:58f6fda59d3bee95cc03e6efbb709559d8ef5c49352f4a14511cc51cdaf6b2c6
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:2a562391b586197a496f272fcf5c72b40e0e6b89ccadfad51be95294744c6663
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:5eedf086eb6fd24106f719608ff9aacaefe436c158c792c853fa5ae5442d337a