Sign inSign up
cloudflared

dhi.io/cloudflared

cloudflared 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.7-debian-fips-dev, 2026.10.7-debian13-fips-dev, 2026.10.7-fips-dev

Index digest:

sha256:1af0eaf0947b13797d1eef70d13b6e14a9f826c97e527b59433ecb9d6f2fc6e2

Manifest digest:

sha256:086604abf2f94643824f437b08838d1fe13c176491687f4e62826e9def3946f8

Size

42.65 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cloudflared@sha256:31bd0ee320181b0e84f150004b4916ab8ab1ae5402b6566fa0b4dc65fc19885c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cloudflared@sha256:e4e3536e61f3dfdf00b9d1176c77c6a10dc1b93607e7ccf9619aa5e386ef7f3f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cloudflared@sha256:ec0d63590f9bb53486d81ad93f4cf6e55a2a8d1e0ac81e096a673616fdf5adc4
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cloudflared@sha256:45e16a567bb702cf4b60c0364986ef7939ad4f31d41091b44a6c34c26ca53d6e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cloudflared@sha256:582079f601523f080069294864563dbc1429c7ecfcba432447806088a8edb361
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cloudflared@sha256:36f55b431af7c6974e905edd004b045d0cbc3a9675c268df33508d4846cc01e7
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cloudflared@sha256:9d93512c0737ff3a16581bf72db70aff6c2cf5fb7f2e34157fb82c6fccb21a7f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cloudflared@sha256:9d258b26d8dd534ebf182609aa159164d3ea67c66697196a9757380c27bf766c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cloudflared@sha256:de2ca49dff052b6a431b7020077115e8bb7367f87fa5731c3cd3c53070d4c7b6
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cloudflared@sha256:a498101c3df91d981b9af2ccef3fa93ba4481704a5598dfcf1fc5d4f548d8575
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cloudflared@sha256:29b0e0d8a05e8ac23223d42ef166cbb40d802aef50f868efc2f6db219b672888
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cloudflared@sha256:d3fecd7466692ec3390c187334e7418d0cb25ec3bfb16fc90c4ef01e65374a07
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cloudflared@sha256:c63c2c9876d05a558372a0143f79dab9f67059cbfce9264aee725e4ea723ce8e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cloudflared@sha256:6ca2c9704f56dbaa782e6e0c293cbb15c0445394ff2854f054fc9eb1bbdc6082
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cloudflared@sha256:192c87ce50f35cf8538a1d1283285b9421e3a191023de9f9c8a46d0ecbe63813
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cloudflared@sha256:74454a88ee11931430fd7e41c33e45cd5a3396e1a5248ba8ba07de1575c7b116
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cloudflared@sha256:adec8e84688d580292737e7c0d3a6ec4b670dce83ab2906c242d1ac0a2b725a7