Sign inSign up
Tigera Operator

dhi.io/tigera-operator

Tigera Operator 1.41.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.41-debian-fips-dev, 1.41-debian13-fips-dev, 1.41-fips-dev, 1.41.1-debian-fips-dev, 1.41.1-debian13-fips-dev, 1.41.1-fips-dev

Index digest:

sha256:7fc88112cc970c074f5a90033b49c889f9a359c9b7b0cd6557da25c0db34fe61

Manifest digest:

sha256:93b1b0006ed295f6facb79020bd8158eb3b6e56d820564c38e78d6a8f1268d97

Size

61.75 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
1
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/tigera-operator:1.41-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/tigera-operator:1.41-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/tigera-operator@sha256:916bb4c9b6dc0324a4939b63d214fec59e97cf5ea97769c34235297bf1074fbd
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/tigera-operator@sha256:9fff963b2722d8d74e02a3a672757d19e95645364642deddca7710bca1a56369
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/tigera-operator@sha256:d4fc822ec11beb4b62fbb21999ea256e443d96c8cab34de06e47a8a2bd7390d6
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/tigera-operator@sha256:bb43abb27fde5a53192e95e4b2b0f5d42ed7c51d289ffb87bbaf8411fa007cc4
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/tigera-operator@sha256:f971d7681d39efdf4d0440981cbbeffae856fef55a2df218d15a96e6c87933ab
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/tigera-operator@sha256:c241d85c8326934b1eab131f1e08474e2a1a18a2bfd5fbff01c9e8fca66a9805
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/tigera-operator@sha256:695d6d484753f47d6ef41480484f6628211ebfbd09c43c2c26e69c0695ec9f1a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/tigera-operator@sha256:f0ed1ca1e52eabfc1cb6b55f27f5da03534ddadc297b09b7bf535ff835950e7b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/tigera-operator@sha256:6a63e4c9bda8c23e9289ba6960b6ce635cb8568c5bcd2cebc955870f6734c57e
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/tigera-operator@sha256:bd8d3a5cd152717faecd290cdbe926c5494596b806e0220e482527dff215ae19
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/tigera-operator@sha256:1ab6dbe69f0f7a1adb6fd3c181dbd5ba6cc063a234a0c91b2d0f47c48d168869
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/tigera-operator@sha256:587e9d6a0884d82bd6881a58c0ae7371d07744dd06ba12404978170563d30c8d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/tigera-operator@sha256:b6730c0e1568d23909e3bb615fe6c824735a6d55b8c15fd8a03f1de2ccb5138e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/tigera-operator@sha256:6196d3ba85b345292cbc4ba58a6c7c780e396062be7ea26a9c5051e78f1b347d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/tigera-operator@sha256:3cbf11a5f775fec6e6c839d73ef10db65c2d738bf2dc871d1c2892eca99aa72c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/tigera-operator@sha256:4a1357cdf98c12760c3d162670845652a97c9af9bc91906984417790bb41f73f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/tigera-operator@sha256:e9dafeeee21c3ba107ddd6f43b8ad4b4f812610fd958645a8876c448062e925e