Sign inSign up
NGINX Ingress Controller

dhi.io/nginx-ingress

Nginx Ingress 5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

5-debian-fips-dev, 5-debian13-fips-dev, 5-fips-dev, 5.6-debian-fips-dev, 5.6-debian13-fips-dev, 5.6-fips-dev, 5.6.3-debian-fips-dev, 5.6.3-debian13-fips-dev, 5.6.3-fips-dev

Index digest:

sha256:1485bcb62e2a7b15e14e20dc5166097b3c015c27da27e3c0f07aefa0b107a8ab

Manifest digest:

sha256:9919fd96792977bd0cd3b4530c588a63991173b878f776aca4ab021a99f73120

Size

95.64 MB

Last pushed

19 hours ago

Vulnerabilities

0
1
0
1
13

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nginx-ingress:5-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nginx-ingress:5-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nginx-ingress@sha256:8fda6e01c59a28212d871e68e9e00cf3e1321f3bbe889ded6d380b4a91a73103
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nginx-ingress@sha256:b07a6e9cb17f2cabfe565e22632a64b404e75eceeb21f26b8812076b5c7bf6b2
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nginx-ingress@sha256:60e4c4c62d69f4737b37a302767b505d13674e6e7bc261efd1132d6e4d3ed4c5
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nginx-ingress@sha256:b755b937cfdb69ad7800f965e37850efdea5752ddd1c6b27d3028eb0ad47d38b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nginx-ingress@sha256:a9d8c900dc518094106209d0f8b4c534a74a18116872677e22e9c0e6a2f7e1e9
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nginx-ingress@sha256:186fefebcc5ba8cda6e1af3e05d3b7a78fa1df4d43cf02082b23c00817f8beaa
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nginx-ingress@sha256:d769b616fd4ff66480407ac81a08238df2aee4d6f331f4b4977028b311a39c46
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nginx-ingress@sha256:2a0854f0593c7ee5817454be43ce90ace9b9edf32b6fe3f93c2e5f3f4de30a5d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nginx-ingress@sha256:57ab2e074ad513d9f40b03538c8399bf62d9fd5cda4d399d4aceab495e4df5e0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nginx-ingress@sha256:27a10bd9df16910da24d1f676253789530f98b1f159d8eb7af5e7b3e18f3e7d4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nginx-ingress@sha256:559e8bb6810899065508df1f70b0371be1287b0439c3fe4863b67994b524bfe0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nginx-ingress@sha256:22bce2153bcbc40460e0ab0aa9118fa645c4a8b36c510f5890f1110f34c01dfe
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nginx-ingress@sha256:3ff8d247dc3b4761f6d92cea6bc12536af4035b9c2438f089e26a5b4f737fa16
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nginx-ingress@sha256:3c4fd64ab53fcd7c9e468ea1ac5c5abc1bf4904b29170ffdcc790036a0dd18cd
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nginx-ingress@sha256:36d5b404bfa75bfafb0a3f861e6f7a4d40dcb40b23558b44dfc09ac63d60aa37
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nginx-ingress@sha256:471146cbd710b6068b97c6d7a1f05f3ec12039e34b78447d5d80d03a74ec100f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nginx-ingress@sha256:a816de5d06a4f85db504d9903106c624dae3c3c2f5acf471bb776a4e87f9b40d