Sign inSign up
cloudflared

dhi.io/cloudflared

cloudflared 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.7-debian-fips-dev, 2026.10.7-debian13-fips-dev, 2026.10.7-fips-dev

Index digest:

sha256:812fddf878fa41c616d5d31ff6d5fbc1f74e12853fe6e6396cda1ee611040d41

Manifest digest:

sha256:1f113de24b2fcfaa226201404451572e87593f88de018514a3078fdb1a44918b

Size

42.65 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cloudflared@sha256:3b1058f732c8094a511767ca052a61e80b50cf0ef8adc86516b9d2da02cddb8e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cloudflared@sha256:6f78e908f670d2280c2c69a9e34b205cd24e44c52d984130412e11c9695c2716
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cloudflared@sha256:29d1854a3e6ef69644514939f06ada39951570baa0007ef1a3363197063ecc76
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cloudflared@sha256:25acf55e3c9955d1ec5cb5b80cdca9769fed03a64a34f57011f97018c4d97fd4
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cloudflared@sha256:ad22252e4582274def523e6d411ce74d83e50fa44f852926f71a52fed5ca60d7
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cloudflared@sha256:7f96015834071e25a497996c4165ff969a3e5123764e94a3b3ff8a193cf81b59
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cloudflared@sha256:9788eeab46781277d90aba074ff4b9f82d9a87221b974602eb47b23fbc810618
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cloudflared@sha256:0239a8d0d187d01e8250b523f6f7fd4681f4016370531629e475137755de80b6
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cloudflared@sha256:5573300661a71ac0c06c0732fdc84540474f291d94bdccdf47a69cc334fbd3fc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cloudflared@sha256:0f3b5cea1bcaa9a349613f3f8a913ed52c6fea192dbf90c1ba27ca1ff4c29267
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cloudflared@sha256:dce7d81a4a5983c6e54bde8d98c9ae14d3c11548a7a49d53fb261bbfce4ad73b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cloudflared@sha256:b5710e9ed12522c75f1c5d89fbabf70f8fcb978c1f89c0514df00446e47d3838
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cloudflared@sha256:56e214d1e8feff8f93b04e77ae184ee0e95e0fa976ff6ba10060f6d87632fc03
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cloudflared@sha256:d698a76a73bb16eb243e1e284dfd23299e0b4fcdcbfc3d10061ff95b6d938ae6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cloudflared@sha256:11cd707bc470aed4b15eab0a04c7e68c1991e1bdf0ed1c853c78182d9efca65b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cloudflared@sha256:f5d3f5f9e3c448fd0d9e2630d749c75d082a38d890ba41299b36d52a7188877f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cloudflared@sha256:6e747370003ec982cadb7c13a628e8603b51de9d456952a5c1d56885a3e03fa1