Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 3.5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.5-debian-fips-dev, 3.5-debian13-fips-dev, 3.5-fips-dev, 3.5.0-debian-fips-dev, 3.5.0-debian13-fips-dev, 3.5.0-fips-dev

Index digest:

sha256:e2eec8e11d79bf39507c0ba0e2ebbd8f56f14a86457a6382868c81501b2525eb

Manifest digest:

sha256:03748acc0adc1442c01586b0011d92405b352abbfe9c554a55295d1b63991aa7

Size

60.98 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:1d9b79a457ff9d46691752228d9b2e5cf50e1d9fd43c717dbb8021c338d191f6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:be32c2f46017c544a92b89367401fe1334a1a7dd4a6756a01a7bec46dc67e528
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:642a2fffb326b9bcbaa61e156b7a69da1b53f816629cdf05279907aece631653
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:0e087aa55f7178aad47fed888452a1722d4e4b28d3dffe68e806c2ab8385514a
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:97f8fbe1c1673f50e7b7fca1500c14328acdf2771b54a46d413929ad0d120e2a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:356b6d5510c1ebab877e2c1ada7ed3bdedd21fe09d585929fe728dac72e167ca
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:49c8d1f787d01b60f4b537592d705703b57e01499622781d160b3c8b3ce5cf3c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:1ffcb6451ecb8fe7e977f261e1732a357db9997b3aaf8c580879f6704b8167e7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:2674662908ca9a49fc36f86e64994e18cbc63d3264315b8e9412b6c2bee089d5
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:d1b70091fe7d84c7898bd2753b8c81b2c5e80b4ad36a8bcc2e0433a6455573c7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:9c8a5cacfbfb310382208e2a0040ab8c3f7f9e58e89fb9508064db79a7d05853
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:e4420aeca35295b1edf697c4217faab0893ee304efcf88d62bc5ef717a6037a5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:7af8ebbc2d62b496432aecc551693305bdfd1fc3c6224f11c7bd0227b26b7931
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:e82a1d41bf6fd5e1147b5a50f0846908ff4fb214d0e2d3d9abe01231a6c4b584
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:30c84da25c886b4e0413ed6764472b0930ac85bd48dfd7047fe47918f948bbe5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:557097d7c10f2f4eabce5b83ebe79c61f7c0bcdb477a3a6a9ffa0a632e8695c2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:fb733d294b9fb75ff4c2659f5c4a0b31b88070033889bdc46922d87c885da064