dhi.io/cloudflared
2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.11-debian-fips-dev, 2026.11-debian13-fips-dev, 2026.11-fips-dev, 2026.11.0-debian-fips-dev, 2026.11.0-debian13-fips-dev, 2026.11.0-fips-dev
sha256:f080dc332a9b9f6f0fdd8a8b989c44a5a8d0917ebbbbf3603ece097ac7433c33
Manifest digest:sha256:051265c55df5c00d0bb2d9230ad9ac45f3a50604b20bef83f9b823ab6eed8d3e
Size
42.65 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloudflared@sha256:8ac4dd051c3b2b5d7dae908a308a161588d7e3ac53cc05df7e25f4211c6fc3f2 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloudflared@sha256:8f1f92a9881778c9426909a42adf2358e7a0d4de8add7d0653fb7a0830b1f9e3 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cloudflared@sha256:29dea2e5e5f31504cc93777ffd6a02e26195685568774ea63c664e415e08ccd6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloudflared@sha256:21582eb65b97e0aee694753084fae00aaa062310475537a9ac7d5bae4a3d332a |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cloudflared@sha256:2d899beaa300b824091529838e3368dc1bf1168e458b706002f29a9390abd716 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloudflared@sha256:ad5d0833caf860a0c184bdc25061aa188388a852353dee5da40d80238b45249c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloudflared@sha256:1bc3611647a35ca0aca1cc6b87d3af36e7f1da71fb37b27b0e4511d749778642 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloudflared@sha256:bfc4a506d5444beac35aba10e1767df613daf1effe5a69dbc866db561fc61872 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloudflared@sha256:a002daf68c6e2f91d170e0148b1f03fa04962ca3ca6d518fc9c62a93717608fd |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloudflared@sha256:5d5b62e902c7f8972f11ec74cf193c53b93f59f60f5996777ae3116f2ebdeede |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloudflared@sha256:7abeef182321643a4fa0d5377aa5d883480494ff04bfce18c64a762f30ffc255 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloudflared@sha256:571e27140f46ebb7c01277154587a56ae5793c2a229d07d59578df5611198251 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloudflared@sha256:4824b26706c1a58e63eec45a9ab2c76eefc29f4186fc248d986e797d0c001347 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloudflared@sha256:34560e9286da36e18c528bbd8762b465a3a9a7edaf1ffe90ee3ea7137615aacb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloudflared@sha256:d359e852c8dfc5cf91650e864b8f2861bfd07f156f07571517db4817a3e28a84 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloudflared@sha256:a4d7f102b755d31e541b3766b93401b1aa049707457cdd1a9bcde7fbf4227d84 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloudflared@sha256:f310b1eb85a92efd7e4b62fcd9a82624521929b2b058379cf5c75c3cea9f639c |