Sign inSign up
cloudflared

dhi.io/cloudflared

cloudflared 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.7-debian-fips-dev, 2026.10.7-debian13-fips-dev, 2026.10.7-fips-dev

Index digest:

sha256:640a1edfd2bf61c73979c0ceac70fcf7d50503c8738d823973b1a934fd3d672a

Manifest digest:

sha256:61fff76ba8bfc6fb44784915587ee70bfb325eac315c38a7a08cc222f5befcd9

Size

42.91 MB

Last pushed

9 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cloudflared@sha256:f2f4e1b6631ffb74bc5703cddaa37f86df091354fe8550dc5b54aef8a4df607a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cloudflared@sha256:e445163ff78ac1cc641bd1ba96317520f50946d04aa48440af0192360b0a0e77
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cloudflared@sha256:a9d518ae62a47461dc6704ad325966fd326b8560d3b27192bd8c3a07836fd24e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cloudflared@sha256:e9f74597e2b725f21fad81c71214b8c2f761695cebdb4b2d9059a066aa04ba4b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cloudflared@sha256:81a53942d7171d18f18681a50fcabc7580f0049f05f54ce2bf3f8deada1b9e5f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cloudflared@sha256:bd97eb78cbcce2a23c7eb15a1729d93dac55698fe7838c515d151910b4b08aa1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cloudflared@sha256:4682daf18b8ce70783f3a1cf4c7b83cbfaf3372eae7f47b5e84bfe2ec3de297d
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cloudflared@sha256:cf7a3fa3d7e6dc515547dfe224b70afa9fbd45cd2e57145d3d06126b37b8af20
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cloudflared@sha256:bdd40ddfbe164c17835330de93835c9e5251d46587abdbd3ee56400cc95604c1
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cloudflared@sha256:6547c091a353ec11a769747483eb394c861479c1fd5cf964b0c545cbb53dcdc9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cloudflared@sha256:b5412d5f6df69c9416a37ecfbd8a5cb5c57c8ee95c28ff585a9bc4e3d41fd9a8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cloudflared@sha256:6534f1810eb0a6363fdfd778bcd9eb00b1c6eef546972d8b78b4f0d7e233f1f1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cloudflared@sha256:b95e5e22dd5d9ecaf92e6b7ba334cefe4ec8f8b69274e037b06daa6bba0a7dfc
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cloudflared@sha256:e33cabafa585f8f058699deaab19ebacc722c2ba3c7d1edbb4afeb5c8fb29802
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cloudflared@sha256:b219b5ee35662996889d9fa6ddd14082e4b436ba5f692d3b6ef11ca91052e83a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cloudflared@sha256:3f2be3e2ab8f17ed2c51a5737c1f66417916f733020e4fcfd14cb08f5e70a021
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cloudflared@sha256:613ca60b09a2ac971bcd7addc20fb8ee311ca53c83a4720f162c9feaaf50f57c