Sign inSign up
NGINX Ingress Controller

dhi.io/nginx-ingress

Nginx Ingress 5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

5-debian-fips-dev, 5-debian13-fips-dev, 5-fips-dev, 5.6-debian-fips-dev, 5.6-debian13-fips-dev, 5.6-fips-dev, 5.6.3-debian-fips-dev, 5.6.3-debian13-fips-dev, 5.6.3-fips-dev

Index digest:

sha256:de534dddbd9fdf2121d84427c34f7a7658885a6e13b4a973d96a800b23e29b74

Manifest digest:

sha256:0f500d278b766362ef6d0fa68b392cffeee4706f995772237a79aab581b960e1

Size

95.64 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nginx-ingress:5-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nginx-ingress:5-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nginx-ingress@sha256:ad796bf7dff166a793d72d13ee080b39ae26ac13cd384438065c72a727c4f9e6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nginx-ingress@sha256:688ccdfc161f3bea6c79e972483e6ba087399c5128a8234a80155569390a754e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nginx-ingress@sha256:4e368e1e62882427d06f78cfbcfc69c5f8d993c974254e2df9c6bf943453b6b0
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nginx-ingress@sha256:6f6f2f048294385522fc58b90ff3fe34d96ef21d61ef73d166cdcc04c6077a63
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nginx-ingress@sha256:f97cc0cb8257df28ed533e8f1be470c673759b2b5919f10688d4abccde95a57a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nginx-ingress@sha256:f0193bc4fc91fdf92a2781964a5afb6116c00c8cb683ec2a6256046f3c4d7a12
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nginx-ingress@sha256:afdbed63891dd88829112e1838d52cc2b467df0ce0a605037cdf920e25f2296e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nginx-ingress@sha256:2cd8c0a197cba1b2c05b355625c1b219e05bd04afe892c56b5602369504bf15d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nginx-ingress@sha256:b3cf68db5da5bc9733a926eeefdeccc25af4bbb9a56d993c956553bdf5cbd2d1
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nginx-ingress@sha256:76706703727eaf1e6cb1870ad848f49e756c29d02568940ddddf7594433f8b97
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nginx-ingress@sha256:5ec1dbcc39788cb24d0a1efcbd148ffccb99ed6678c9890a86521376c16a896b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nginx-ingress@sha256:abddaaf62ec498e1dbfccc049e523f58d2adf61854afaa41b7655d2826a8f315
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nginx-ingress@sha256:c722d1066bec7f56f3165a05566c5739e9a63ba7544485e7ccd1ec5c35d77da5
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nginx-ingress@sha256:ef2c0796f5425c908a2e425eddabbe4a70bf8452523b86cb4432a24ae776b412
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nginx-ingress@sha256:612aa3de63ed0bde9e2dfab3508164dc00b62be70bda487686095fe798b7dee5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nginx-ingress@sha256:282aab7fc3cce80c1763ebffc53ca2023bf110e01862b8646ff89e0caca2f1f3
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nginx-ingress@sha256:e579357742c7694b5f3df926a1153d7dad574b34b166ce5b6fabd39c7b5e6f26