Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 3.5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.5-debian-fips-dev, 3.5-debian13-fips-dev, 3.5-fips-dev, 3.5.0-debian-fips-dev, 3.5.0-debian13-fips-dev, 3.5.0-fips-dev

Index digest:

sha256:ef8b7d7590196044cd93ee03ea8cb1fce26eab34dedae1840ec37f24617d2b13

Manifest digest:

sha256:a2bafa2022f90f80cc6a5f0d00f365524cd0a583108396cf59d0dd9d1da7e52c

Size

61.12 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
1
5

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:bb348039aa2dd5aa50515cf1a6a5fb02bebf28798764e845967e6dc00584705f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:7152323a07b2934a6ab44b942fbc8198f088183d9cd5f5b84bc6c52034902fa5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:e869bf27c82e6ef90a99cc8c136e4fb6ecc282191f2245da2dcf373c0e214439
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:2193a1fca8be2595558b5e478b9bf53fba08ecdbb11a4089bcbf2387147cb9c4
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:31811a61911188cd5efb2aa3d859e2f5dfaa4ccb085b0cb610d8fa7fa2ec4af5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:f8621e7cd8e9cfa35416ade919f16e17c7530ed47ea3421cbb3a8ebfeae5ebc9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:367436c87089dd7dcdf9e6c4605ce54513607857c5e58ca9cef909553a074975
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:04f10f1f080e43a57d86ce8838eca6d796d8ae607291d8077079bbb324dbe2ae
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:62c6d8516ed88d6a0c2a9f237c67f9c337d60db7423a33c93b2553ad9415ae5b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:943edf8ccab7dfdf2ec5687c81990e0942f1d97c1fb7f99819fc485563cc8ee3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:260e7a4ad7e9a27e830dc1281ddbc2aaec876ffdc7ff46233405f5f8c0c61da8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:0319d519b8fcdf64620d7ada1c10a8a748e708f4c83c104a5c7d9edbc86dd1d8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:450e360d30c4008db1bb4851973da83a50616b5fc28f928c2e99d73fa217494f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:f4a67b47fc4c5f003bd079bc082ecf01dc045400337c4b39c3d5e716ac46fda9
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:e8c76db40d067d812299b74a9db6c5699a5c2bb2d9be7aef64731a903a8c3bd2
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:71f3ba3710615d5d2cf028e861dacef15347f2df679c6a766f2c83ed067093e1
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:22d31f7ea0ca2b4c8d7bfdc3084a93aee5ac94a7b9bfa4e9f76328a3ee980603