dhi.io/cloudflared
2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.7-debian-fips-dev, 2026.10.7-debian13-fips-dev, 2026.10.7-fips-dev
sha256:640a1edfd2bf61c73979c0ceac70fcf7d50503c8738d823973b1a934fd3d672a
Manifest digest:sha256:61fff76ba8bfc6fb44784915587ee70bfb325eac315c38a7a08cc222f5befcd9
Size
42.91 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloudflared@sha256:f2f4e1b6631ffb74bc5703cddaa37f86df091354fe8550dc5b54aef8a4df607a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloudflared@sha256:e445163ff78ac1cc641bd1ba96317520f50946d04aa48440af0192360b0a0e77 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cloudflared@sha256:a9d518ae62a47461dc6704ad325966fd326b8560d3b27192bd8c3a07836fd24e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloudflared@sha256:e9f74597e2b725f21fad81c71214b8c2f761695cebdb4b2d9059a066aa04ba4b |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cloudflared@sha256:81a53942d7171d18f18681a50fcabc7580f0049f05f54ce2bf3f8deada1b9e5f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloudflared@sha256:bd97eb78cbcce2a23c7eb15a1729d93dac55698fe7838c515d151910b4b08aa1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloudflared@sha256:4682daf18b8ce70783f3a1cf4c7b83cbfaf3372eae7f47b5e84bfe2ec3de297d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloudflared@sha256:cf7a3fa3d7e6dc515547dfe224b70afa9fbd45cd2e57145d3d06126b37b8af20 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloudflared@sha256:bdd40ddfbe164c17835330de93835c9e5251d46587abdbd3ee56400cc95604c1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloudflared@sha256:6547c091a353ec11a769747483eb394c861479c1fd5cf964b0c545cbb53dcdc9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloudflared@sha256:b5412d5f6df69c9416a37ecfbd8a5cb5c57c8ee95c28ff585a9bc4e3d41fd9a8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloudflared@sha256:6534f1810eb0a6363fdfd778bcd9eb00b1c6eef546972d8b78b4f0d7e233f1f1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloudflared@sha256:b95e5e22dd5d9ecaf92e6b7ba334cefe4ec8f8b69274e037b06daa6bba0a7dfc |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloudflared@sha256:e33cabafa585f8f058699deaab19ebacc722c2ba3c7d1edbb4afeb5c8fb29802 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloudflared@sha256:b219b5ee35662996889d9fa6ddd14082e4b436ba5f692d3b6ef11ca91052e83a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloudflared@sha256:3f2be3e2ab8f17ed2c51a5737c1f66417916f733020e4fcfd14cb08f5e70a021 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloudflared@sha256:613ca60b09a2ac971bcd7addc20fb8ee311ca53c83a4720f162c9feaaf50f57c |