Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 3.5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.5-debian-fips-dev, 3.5-debian13-fips-dev, 3.5-fips-dev, 3.5.0-debian-fips-dev, 3.5.0-debian13-fips-dev, 3.5.0-fips-dev

Index digest:

sha256:274a30c19e047386679cb7d6fcc44a4434cf8252eea4ea16cceafeaaedb9b256

Manifest digest:

sha256:e38e1386b472b5a37b293bfa6c890d3f65bf3d5b6f6dbc966221246e392e1426

Size

61.12 MB

Last pushed

60 minutes ago

Vulnerabilities

0
0
0
1
5

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:36568f8e557a26e33420c516e44cb36ae0b518900a6393efbeb7d26c95d5f226
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:7f9ecde819ae7eb5328f0a494e1f3ba5f7b570ab173695ad4cc4c2fbf22a67f5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:df320a712e47773fd071536b01a7bf15605f210e39b0a09fad62870a37d636bd
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:7265b346acc9db530f30241da7715ed192b9f6400fba51d220cd01e9a5d4579f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:d1a3b5d5ef83e1c1612d85ac2dd89949dac1d74c7d7ef961eb80d4ec429b2f02
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:75fba6ca9a33695a86ca2bb1a56822694da77cb91b93bfdf389d3a1dd763d0d6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:78c958308d55aac9bf79d0dd75bd0e8392107c8eb951e1526e30fe1202388daa
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:a5c8fedf9be71f4bd32be8a62610ed39b6b4951b1d44a63863dff3faa38dbffb
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:d98602dc2133aa6e3711cbdb2fa8c0256b1377e75622884ed3569135d747a5a8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:62c915b1cdcb8cfb2d4283f54ad67f6e9cc1314fcc85131639db2e0d66d4ef45
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:c0dc86a27c9f6bd26a9b12337cd5f13be3c55873faa95ad5f9dc348c5ae590e2
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:107eadade3add9d592524ef3c3bc9826aa30640e7b33c653db62e49da4648423
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:61e18b2f9a014b124c4c2a9abe0f061af5850060b174476a46a7b4823ac3da78
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:bf9420d0b5debe1a198e4c2e4d0b9e04501a3c232aeb9dfc59bdc3536338db0b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:ceb62ba9bc891a6cb23e8bd21f9b17bc159fbdd0c0f3fc8c63986eb22bc005e8
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:48e88d0a28952d69a3ae523dcb90b48b74fb40353885cd78564b31529f869883
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:046559c87ac3005c293cecf9c7586f2ec375f98a786ef360f534458678444ee3