Sign inSign up
Cilium

dhi.io/cilium

Cilium 1.19.x (dev)

CIS
linux/amd64
debian 13
Tags:

1.19-debian-dev, 1.19-debian13-dev, 1.19-dev, 1.19.10-debian-dev, 1.19.10-debian13-dev, 1.19.10-dev

Index digest:

sha256:eeeb2135c3e87c64b0220544b146ab97467dc0af389d94f7c6adb321b63afcf9

Manifest digest:

sha256:585f9bfc108bf261e630dde25fb1627726a64970fc6b75a2ca8e90a93fc934ea

Size

333.86 MB

Last pushed

51 minutes ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium:1.19-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium:1.19-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium@sha256:b2be29fe319b8230e848b3744598b4e6df7b02d9f5ec9ce17b3d7d92597f980e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium@sha256:e40873ed56c878c75e3b10bdc84fab7dd5a549fcd76bcb5a1b706f1823510bc3
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium@sha256:3b5c677ed8da906d8b4404a9b651f75fce8264e6fc0eff68fb6e819d96b67a9f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium@sha256:421dce03e4294b896dcd6eef01c6feb8cfe427d837c1ac35340bcf8631abee85
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium@sha256:7dedca50255f36a1f5fb76339c763f60c7634d66c58f57baa08313e7138c92e0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium@sha256:2906c43c53b1e0eb9188a3745aae453876a7ac4c4a5a05d7ae2b2ccb92f0b795
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium@sha256:e9834d40b8dbb60edbb48a591e7c4dba30557067b3ae87a8e6739ba261d03b54
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium@sha256:2963f3149a361b9fd18238c3dd20ba03c11f44bc218333da18625c539490a4db
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium@sha256:54ffdba54e25fd7180bb81bac16f79e7eba93ec9ff6c1cfc746a010f69a2a494
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium@sha256:4250ea424f07840abf18bbaf2d705d4c72e727b1e1672b7af3442239e04c1066
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium@sha256:6753667f614d8dd803e06c6a42c9b0d50a153b7a4d1d9532ffc726a754f51f55
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium@sha256:3adc297e106b05637dac88d909d61d71647c3e1a6f4eabf21763fefd13b5f667
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium@sha256:34b4dfb67d814c67df7df77ac6e66d21fcb72621b4d0b0d68ef0beb47d4918f1
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium@sha256:b1a6b692df7bb75511674feb302231b4a1fb86f63ab3790e94cbd78ee8bee068
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium@sha256:b02690fce76c6de2247a3ddf2753b654d8159e21e68b1d6f86f6bcfebe1f708a