dhi.io/tigera-operator
1.40-debian-fips-dev, 1.40-debian13-fips-dev, 1.40-fips-dev, 1.40.16-debian-fips-dev, 1.40.16-debian13-fips-dev, 1.40.16-fips-dev
sha256:1fd0e73a130830f6a5a0455543553d4f0cc33fe50d3afda3894cfe51e94042ad
Manifest digest:sha256:cfee61fe1c400aa31cf8958023e42e2f9585b375cb327a87326d3afe0474b5f5
Size
62.81 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/tigera-operator:1.40-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/tigera-operator:1.40-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/tigera-operator@sha256:25064b641021a8b5b30f30e9f264d6e3d2f736114ae888bc002390b3b8853099 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/tigera-operator@sha256:ac3c1c05ed4598ba24841d1f33a23153f5f7b6f1b833e35c1edc685ab4f42624 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/tigera-operator@sha256:7da9ad22cfec8c79c4e5d5327fc5b1b513f1cb15695f158347125d51a3630d81 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/tigera-operator@sha256:510b4b8e6593c1533c86288855385ae7fa5434ef5e00c51726f9cec456e7c0f1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/tigera-operator@sha256:1daccd3355935b2d0f91fc3719b449160f2e68332b175d444888f61d8cbae026 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/tigera-operator@sha256:6f3c4ac162429b74301973e0f5bfedbea9720cee13d77008c3df9b9caa08a775 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/tigera-operator@sha256:0db131a8e57d267cdf23979c4a74e05049824f913cee2077b3e39220de5b3e25 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/tigera-operator@sha256:6163ab043d8bf284cfe2c869905384e399e6d49ad3d0d11b6ae45661e446e60b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/tigera-operator@sha256:be6b0ff3445abf921041026e05e57398ab034df75557f4ec2013a11ea19a9f91 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/tigera-operator@sha256:90b14d47a5143b1f928ce182d21d21f79bcebff50461ee4f31364a98e263bd45 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/tigera-operator@sha256:1bbb0512b5ca3e08ff59e1d1b9880ca35b6b6c80914e8d9692020c13d8231ea6 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/tigera-operator@sha256:1460d3b25c45f444adba871cb76c914e83e7d0f7ca7cf87cf10b3ee105dd1003 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/tigera-operator@sha256:909b1be9ae969389651c14022c6a5f81e993e9790362022d875d6d5be3525c86 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/tigera-operator@sha256:4ff0ee1763df0768804c086572290a2c972ed3a4da688a9df05f3a9fd57f7580 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/tigera-operator@sha256:90575eb7698def679c764f3e87abb5d2e49d6a5c4cface274ebce7a7de78821e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/tigera-operator@sha256:c7abd473dfaad9a99b9f68195e14b8fc593abe6878e936b77ec1acccf56d4262 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/tigera-operator@sha256:d99c21670db2c0ce4874bd1294c17524b75c7c22ccd841ef3ace0954a59e3332 |