Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.14-debian-fips-dev, 1.18.14-debian13-fips-dev, 1.18.14-fips-dev

Index digest:

sha256:582591968f11d99de5020858b999c6eb7bc15459a8391befbc601b441980a2b9

Manifest digest:

sha256:9926e2250338abe94d1cd4226bd80b6b31a5c62158726d90578490be71c1f3cd

Size

80.36 MB

Last pushed

2 days ago

Vulnerabilities

0
1
0
2
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1.18-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1.18-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:5564dd75b9e4c5dce40b9e52c9a53f126c0b18a5e77d6d3f67b54a4eacd8870a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:a469b77b1e0830ceddc7ce6089d90da09c56087f0743020242ba016db3f4b308
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:aeb16d5f9f82bc071fa6cf0228a16afd2a1ab4646e76d9f8654cc389f415f218
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:ae39d6a5e1f73f9dab9a4e57d07cc25c122c320755800c65c6162afb839c0f20
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:da5829d5c1d1e44279c7fa176e45faedc72aa43cb91a52e1dacef4f1ee4496e7
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:3d5bea74e1c96ba39c28eee31d5eb9ffe1115b59fa13d706044037ecbcd1573c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:dcf36467e16c293723ed4c108e772a33be8a2e0e188ec6374a0d8798dfff7394
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:eb8350567eae754c0aa9c8cc502048d7475d435f17abba737e190f5c787ca2e7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:9ba8b67cee5c2a0ddf0962bfa43082343b6189d437240c22cace92cd63b19910
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:5a6f590df8b3fdd3b6c5149a61b9005d02bd5e92b4328c7804f3576f24f6020a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:e180e8d70395a45d4618e1bd57838481e2f417927863e1f63880fbe7e33359d3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:70ff168d40bfd72991108a8dffad3e9e7ea902808361581f32b6f6e938e2e08c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:31343404a4a5fb910889a60569a5ce1ff066f340c6d2b28e3ae4571855da9a5e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:09c2a3a242630337e134d2bb992d8fa8e196c1b525d1c640357818ffe94a2585
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:2c6105a14a71489b0efe4f01705d741ea250e4f38bda57561a87b1df8ed416a1
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:5d6e5edc53d5c20cfac3d8b7b849e7aaf0c38b8c42836def15cb329e9d5b4359
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:cfe4f36427f14df51bb01ea42d77498deb9a3998de5f2107ee7508fe56fea536