Sign inSign up
ECK Operator

dhi.io/eck-operator

ECK Operator 3.5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.5-debian-fips-dev, 3.5-debian13-fips-dev, 3.5-fips-dev, 3.5.0-debian-fips-dev, 3.5.0-debian13-fips-dev, 3.5.0-fips-dev

Index digest:

sha256:08463647693eaf693053554c6bc9916e8436341cd771cebe473104345a317494

Manifest digest:

sha256:f00dafd9f65de7370e6469a5c74fdb93d71b06c9f063bda3eb08ca20805b773e

Size

61.10 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eck-operator:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eck-operator:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eck-operator@sha256:a1ad6294ee13ce5c5341afba5e79a0e8dda2ccf3ba883acfdde4e456e65b8c99
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eck-operator@sha256:c5de4ff1860e2676499645d0585617b89b15dd5f19316b6e0459483c177a62ff
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eck-operator@sha256:918e53b2a85abb12c5624b1d8709f01ec2c35a9bc3b83471d2b71590e9f24ba8
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eck-operator@sha256:311b851a5c08af4ba210abdd7381cac8ae28828d1b168e1a4ed819690ca6a35f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eck-operator@sha256:59ce5301ff9679751168884802fc007d1c6c8ea46f86935f313d8e0490527ee4
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eck-operator@sha256:d2af8da2497e015669916766299d3d061ed7a72c1df8e533cbeb3bcf46482da6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eck-operator@sha256:58ccd7928ace91b1b4288ba7de546072cd541da7e987bbb7ab59879d444723b3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eck-operator@sha256:0c0e4e4c538f3882348e4d7556f3f2a0f76af12c4017d926a24df01a0a73a69a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eck-operator@sha256:fc5d9d139557550d8221ee39fabb5a957f60b706f4b920a8aa38e7e3beb73688
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eck-operator@sha256:870ae7ec2855426852fc000d80e0275dceface145b0380fdae266b8f11b5640e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eck-operator@sha256:2f6a307f9268bb17745425477c50d24ac78eeb48d444319a4e24bcbc08e6e494
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eck-operator@sha256:cdbfc27fe66f45326f31762edd8c2138a5085c50786ae838d59f76cd56016e53
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eck-operator@sha256:0f617c7ee3462f437b7023c8d77ab82820481bce17c2faa924a457c2899f725f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eck-operator@sha256:5b992f7f966f082a0fa92fead55bcf318a69569bb35033f645bd2d0adcec0e6c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eck-operator@sha256:8da696c70098041dec54b8d04abb4b74f6ff6fdf19027c7db7065fc820e5bc90
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eck-operator@sha256:b88e28be48aefaa6141063a5419e3d90cc70500a2f5535edf4b7899f68a5f230
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eck-operator@sha256:11d218aa99de9ea8526d522fa53049fccb23e9f32388d54b54fb019a6fb6382c