Sign inSign up
cloudflared

dhi.io/cloudflared

cloudflared 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.6-debian-fips-dev, 2026.10.6-debian13-fips-dev, 2026.10.6-fips-dev

Index digest:

sha256:fbdd7a03b0cef34e5199be37f9e1cf13e4f7ac66ef094a5f717b29e091e2772e

Manifest digest:

sha256:766efa18abe10c161b953819a88a0317dca0968212e40fefd59e64ffd2be2048

Size

42.65 MB

Last pushed

9 hours ago

Vulnerabilities

0
1
1
25
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cloudflared@sha256:f4025e183d7750ccf7efad0239b3bcff5f9a02cbba64872fa7f8b463014bc4b0
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cloudflared@sha256:b18f10937436e996c9a470ccbc2eeee3b7153fc3fa0e38709e4cc9f86bbc50cd
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cloudflared@sha256:c06edb424b04b8526fc6dce803a54e43d2f8454e11c5b9506552210ed3474f40
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cloudflared@sha256:bb2d00b74a24816bd219be726a7039ec295f68ebfdfeb61cbc60cf608470125d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cloudflared@sha256:5664576ea51b7291d32918a12b81f4056add47479bf063457327e514631622a5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cloudflared@sha256:8be9a640fd51fb3d8a90732a136a16b4f2523695e839ab7126c8aaa3f5974a28
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cloudflared@sha256:e04193bc5ef3a18fe6659fdbcff85c75801e22a108463aa8c84df2b624f08e29
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cloudflared@sha256:26433ff5722911f09d1b615cdc1a1a6961242613158228c28edc74ddaa52f102
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cloudflared@sha256:43c068d1ed83460c38eea3d4f0d2461771bb254559436cec4dff1bb472188798
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cloudflared@sha256:acdf3ffd600ed6bb25313e12b9935c0de772c220623d58168dc5179027fa49e6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cloudflared@sha256:f45fd138cc9fd2dda96c3b97423011c2d887df6677611127e53ef4f4ba302485
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cloudflared@sha256:469915ab4564539a900749c576d91abaeff336b2aac1fef9815e302c9d2ed00c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cloudflared@sha256:321dd514603199f6f6df1c631373c072ab70355e8ae730f7da8708e39853fa5d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cloudflared@sha256:4f218cd23f81cf588660fe4b798205c28cbebe601c38e899cbbb369d8192ee0f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cloudflared@sha256:8db49d88832b4b2ad8f2e160b22cb0498d2f644d43f425cfb84027d0f12c2992
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cloudflared@sha256:c96df432a33abdb62d90b59333bf26806ab173373a0ca168815eab99154b59e7
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cloudflared@sha256:e8824ca2444288a8ee32c315b8d73136e2645e67c9b8e339f291286fd882d38b