Sign inSign up
Cilium Operator

dhi.io/cilium-operator

Cilium Operator 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.14-debian-fips-dev, 1.18.14-debian13-fips-dev, 1.18.14-fips-dev

Index digest:

sha256:0a6add8622bc7cb0c85b1ecbaf8d17fe31a44f448bae0f3ba920b5d9671def07

Manifest digest:

sha256:958b6ad872f71892973ac94f29ff9c86dfd35283369b41bbc6ab66c6962d38c4

Size

80.55 MB

Last pushed

2 hours ago

Vulnerabilities

2
8
0
1
3

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-operator:1.18-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-operator:1.18-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-operator@sha256:3ed6f8e176867a2e8d6861e31568426afa9828baa11fcc77fb47a99998088a8f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-operator@sha256:b724e97b557555ee508407ea3616dbbf92925aa36dfd5749d0d090268d92c56a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-operator@sha256:531f345e1a5e92a912c242b3038717818ddda8e322c6ed6753c4a3d9713ad1c2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-operator@sha256:d28af075927d859192633daed5719765d858172f2eb9571de214b682a7f98227
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-operator@sha256:46ece875d36f8ba49ba420d8614892247b9b5c4620e87240c5146c14f898ca11
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-operator@sha256:85dcda94e133d35518c2da7251b06fb5dac58a2bc74a68174b09ceb4c3f5e7ee
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-operator@sha256:f61454789b11b7a7724823c56c6bd297388895cd7faa70813ef20e596c5f6d89
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-operator@sha256:a4ef9b3fb5d1b006962ae1954c076905c8f72d5eeb760a55e1cba22976131bdf
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-operator@sha256:f2d71b074b77b235f03bb093218a423fdcefbc5d07f54f3e90ea92686d382685
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-operator@sha256:9cdadc630132f6dad76ec8a8ef1f919ca26a2af4d296ff2376b28e3b261c8879
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-operator@sha256:f345fad10a816b3f7d75d4d9115f713b1ba9bef1040f6d01dde5718001834c09
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-operator@sha256:e6a33d42715af91b207832ea3b3db76435b81e97e52001df60afc2c55cfb3a67
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-operator@sha256:4fa50f5cd9ed9dd1d730fe978a8a3856ba5d130ed001593c22280ecd28ab05b7
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-operator@sha256:c86f01deef3173e3f854abb9a2a8dae0c37fa0180b0f4ac977929743439f102e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-operator@sha256:026efca9894224827be032ce423cde7c52e60702ba3b4d87424255f06e1c8194
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-operator@sha256:3118f46b20bb03d172df85afbbe3d38c8533dd75e0099a05ce17f49a87a9b0e4
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-operator@sha256:ea3beda13cf37d8633e690c91056461828bf13a74caa111418f260fe7883f6f5