dhi.io/cloudflared
2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.7-debian-fips-dev, 2026.10.7-debian13-fips-dev, 2026.10.7-fips-dev
sha256:812fddf878fa41c616d5d31ff6d5fbc1f74e12853fe6e6396cda1ee611040d41
Manifest digest:sha256:1f113de24b2fcfaa226201404451572e87593f88de018514a3078fdb1a44918b
Size
42.65 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloudflared@sha256:3b1058f732c8094a511767ca052a61e80b50cf0ef8adc86516b9d2da02cddb8e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloudflared@sha256:6f78e908f670d2280c2c69a9e34b205cd24e44c52d984130412e11c9695c2716 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cloudflared@sha256:29d1854a3e6ef69644514939f06ada39951570baa0007ef1a3363197063ecc76 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloudflared@sha256:25acf55e3c9955d1ec5cb5b80cdca9769fed03a64a34f57011f97018c4d97fd4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cloudflared@sha256:ad22252e4582274def523e6d411ce74d83e50fa44f852926f71a52fed5ca60d7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloudflared@sha256:7f96015834071e25a497996c4165ff969a3e5123764e94a3b3ff8a193cf81b59 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloudflared@sha256:9788eeab46781277d90aba074ff4b9f82d9a87221b974602eb47b23fbc810618 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloudflared@sha256:0239a8d0d187d01e8250b523f6f7fd4681f4016370531629e475137755de80b6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloudflared@sha256:5573300661a71ac0c06c0732fdc84540474f291d94bdccdf47a69cc334fbd3fc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloudflared@sha256:0f3b5cea1bcaa9a349613f3f8a913ed52c6fea192dbf90c1ba27ca1ff4c29267 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloudflared@sha256:dce7d81a4a5983c6e54bde8d98c9ae14d3c11548a7a49d53fb261bbfce4ad73b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloudflared@sha256:b5710e9ed12522c75f1c5d89fbabf70f8fcb978c1f89c0514df00446e47d3838 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloudflared@sha256:56e214d1e8feff8f93b04e77ae184ee0e95e0fa976ff6ba10060f6d87632fc03 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloudflared@sha256:d698a76a73bb16eb243e1e284dfd23299e0b4fcdcbfc3d10061ff95b6d938ae6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloudflared@sha256:11cd707bc470aed4b15eab0a04c7e68c1991e1bdf0ed1c853c78182d9efca65b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloudflared@sha256:f5d3f5f9e3c448fd0d9e2630d749c75d082a38d890ba41299b36d52a7188877f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloudflared@sha256:6e747370003ec982cadb7c13a628e8603b51de9d456952a5c1d56885a3e03fa1 |