Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 3.5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.5-debian-fips-dev, 3.5-debian13-fips-dev, 3.5-fips-dev, 3.5.0-debian-fips-dev, 3.5.0-debian13-fips-dev, 3.5.0-fips-dev

Index digest:

sha256:739391bd40ac8b3e49687a1ef351535c1ebb9c01ef291bbf6cd6778be8c4cfb6

Manifest digest:

sha256:3766dd9f52f90ddaac396ed007bb37fae370605fc0433f1e4ff2fa09e6d45faa

Size

61.11 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:4d26d9ad520d2c8c676c2dd18f7eee82f136cebb448a0cd4f0b8c71183ab8fd9
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:70075a28700695bded7d57df5a78970b12c67bedcfa98514820f63ca7e7112fb
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:6055408978ab94fe64798942024c12957613344ca9248d88bc859e1f69a87398
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:d008b870ebdf1ea8d5453a86ee9b9e3850313bae35fc1742c08588faf108961b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:62a922e9ccc4f05d080f9b8493234ee190e4ab7794b8f82e23d4e32d2a36bb3b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:40bf1289081e70090088b514474fd9a58ef7ee938c37ec415ca43b7d9f32119e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:3b1c109e12b745f923e21d2825c2cfdf4bd967a560a907630db804e27e51d8d2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:4a56afe88f05e13881bd613da97394eeb20dd19443f592164cba492aa43f304e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:ef3f5f1f843293f189867fa73da0c81c52861b4d00fedca4e9a44107614ac930
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:0c53eae3d681bee9786827f2ab476214485e6959474a7680e30d950674189c97
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:947562a805f48eff89d22167b7a14b2f640bc22af536001830e6768caff77c53
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:e4f2e863f47db1303eac3944184dfd60be6302d7f3bdf800816f4dbecf05abc5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:636208c78a9e565cef20794b19b51f3ea9d669fcc5ffb0af2fc922333dcd96d2
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:ba5816d5bbd4ec1022817bff0e4611c16e5a7a177a86456e3df6bc864bc5faad
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:6449560ab5e7a17a3dccc864886032c221c5f380142f5c1af225c6fa75f8007c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:909bd73f324ba05898d2a290eb73cc5444f743f696936c2f709473e6333c880e
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:7699e9100550113eea36df22a7fd912cd4b1f650908abd00e85fbe55c416ab0b