dhi.io/cloudflared
2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.6-debian-fips-dev, 2026.10.6-debian13-fips-dev, 2026.10.6-fips-dev
sha256:fbdd7a03b0cef34e5199be37f9e1cf13e4f7ac66ef094a5f717b29e091e2772e
Manifest digest:sha256:766efa18abe10c161b953819a88a0317dca0968212e40fefd59e64ffd2be2048
Size
42.65 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cloudflared:2026-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloudflared:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloudflared@sha256:f4025e183d7750ccf7efad0239b3bcff5f9a02cbba64872fa7f8b463014bc4b0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloudflared@sha256:b18f10937436e996c9a470ccbc2eeee3b7153fc3fa0e38709e4cc9f86bbc50cd |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cloudflared@sha256:c06edb424b04b8526fc6dce803a54e43d2f8454e11c5b9506552210ed3474f40 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloudflared@sha256:bb2d00b74a24816bd219be726a7039ec295f68ebfdfeb61cbc60cf608470125d |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cloudflared@sha256:5664576ea51b7291d32918a12b81f4056add47479bf063457327e514631622a5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloudflared@sha256:8be9a640fd51fb3d8a90732a136a16b4f2523695e839ab7126c8aaa3f5974a28 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloudflared@sha256:e04193bc5ef3a18fe6659fdbcff85c75801e22a108463aa8c84df2b624f08e29 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloudflared@sha256:26433ff5722911f09d1b615cdc1a1a6961242613158228c28edc74ddaa52f102 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloudflared@sha256:43c068d1ed83460c38eea3d4f0d2461771bb254559436cec4dff1bb472188798 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloudflared@sha256:acdf3ffd600ed6bb25313e12b9935c0de772c220623d58168dc5179027fa49e6 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloudflared@sha256:f45fd138cc9fd2dda96c3b97423011c2d887df6677611127e53ef4f4ba302485 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloudflared@sha256:469915ab4564539a900749c576d91abaeff336b2aac1fef9815e302c9d2ed00c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloudflared@sha256:321dd514603199f6f6df1c631373c072ab70355e8ae730f7da8708e39853fa5d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloudflared@sha256:4f218cd23f81cf588660fe4b798205c28cbebe601c38e899cbbb369d8192ee0f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloudflared@sha256:8db49d88832b4b2ad8f2e160b22cb0498d2f644d43f425cfb84027d0f12c2992 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloudflared@sha256:c96df432a33abdb62d90b59333bf26806ab173373a0ca168815eab99154b59e7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloudflared@sha256:e8824ca2444288a8ee32c315b8d73136e2645e67c9b8e339f291286fd882d38b |