Sign inSign up
Cilium Envoy

dhi.io/cilium-envoy

Cilium Envoy 1.20.x (compat, fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-compat-fips, 1-debian-compat-fips, 1-debian13-compat-fips, 1.20-compat-fips, 1.20-debian-compat-fips, 1.20-debian13-compat-fips, 1.20.2-compat-fips, 1.20.2-debian-compat-fips, 1.20.2-debian13-compat-fips

Index digest:

sha256:4f74bd2a4bae8d80766aec6569ae021321a644789737110ae04c8a43e18c6291

Manifest digest:

sha256:14c0bfe195d70dffb7bcbf25a963c1839a785fa7d8fb98e4de74744fe5f0bab3

Size

40.95 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-envoy:1-compat-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-envoy:1-compat-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-envoy@sha256:1a7aee1c9e3b8125a85e6e158b3f33b575e30e0058d26f771c7b328b950f1943
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-envoy@sha256:6ad6a8558f35c7eccd99c1752f5854af6ec3bd9b9adc3f2a72d5a8bd1278e000
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-envoy@sha256:2d14c33fe8358f2434e5ab6f0c3885bf2e9ab66c038c8e4e4b1ac9aaac5930f3
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-envoy@sha256:5872d86c1478439b06e903a42a67e887b2f2ce94b34b4e4d656a49f442e3e3a4
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-envoy@sha256:ef4b0332c3aa9f2cd0d434d86e04ec4d3a8cd9b4e92b078f93f33cbe0fe31faf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-envoy@sha256:d7ebce70bf52db341a1dddf0ac12e9b9e991758c03a4da267c3d5f589a01c276
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-envoy@sha256:9dc4863aeaab06067b1b5f9852ee3d52e6d72e2cbe2301a101846e0507de1224
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-envoy@sha256:e20c135dae9538c4b7a8508f584b80668c66c39d19a4e6ef2e92cd7136ab3118
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-envoy@sha256:930463b320251bbe906267d555e2a405fc8b265f4f83a7d3b8125808d874c9fb
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-envoy@sha256:13a90feb6666b75a1614290d88638442d9a1dedbeef36c13ca90038e9ec57b5e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-envoy@sha256:a92707d2960311ee264cecfca48a4d6b88f20620f86c01fd8a5bd59415f50fb3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-envoy@sha256:75b2a2219b3b36ebb58e03ee002f23f5191d24505083709599f1482c1b318e37
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-envoy@sha256:837667dcb8ba7abda648354f12826e27d2d5616c3a5bb8416a1ccd22b9c37904
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-envoy@sha256:8b2957f67e36f41330768bb32a9345b246b5866dae3b66a3ce1c7aa38cc82b24
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-envoy@sha256:3fc8f31ae3515349f05d229f9c3298e177cb0b397a17a95347f7ee87f33d728e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-envoy@sha256:f1322f72deb54074ba1ba30e328f3b116eb25f4c51b38aa833c9a40bd28bc7dc
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-envoy@sha256:a788dc1aa99f3af04701a3939c4b721f0ad309914f0c3d794640191a918f4c59