Sign inSign up
MetalLB Speaker

dhi.io/metallb-speaker

MetalLB Speaker 0.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.16-debian-fips, 0.16-debian13-fips, 0.16-fips, 0.16.2-debian-fips, 0.16.2-debian13-fips, 0.16.2-fips

Index digest:

sha256:d28f3b222b82a29dceb3ca18e86b041c89a82e342104257adb1b7f2f007db9b2

Manifest digest:

sha256:ff7f7f22ab6102401e474c586d6cfab404ae82fc6967faa1f12fbd4559a75638

Size

39.95 MB

Last pushed

23 minutes ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/metallb-speaker:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/metallb-speaker:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/metallb-speaker@sha256:db6543fd620514cbd7c628a80de129cb85d35522c1beab8851f8fb0a48587c15
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/metallb-speaker@sha256:c32f4740c517f063bbbb8fc4e8bc0ab5846262ed2ddfc716d87b17c6976857a8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/metallb-speaker@sha256:f56f864437087ac2413e74f79002a287b61382a97b3ece91bb7ab9a5d5ea4609
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/metallb-speaker@sha256:9709edbccf810391c1a2ca5d9fc81296db37baa331a88d5eacaefe3bf07321b7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/metallb-speaker@sha256:ddad0e523d4559d7542a21e6ce710cf3e9cdb1ac3d969b2eaebf2910378fcae4
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/metallb-speaker@sha256:8dfa338a568f2bd2d8a0285354a6ebb2dedce833bd80dfd6745b4889c462e904
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/metallb-speaker@sha256:63a86ccf5cdd136e7c80d56e1c89af981761db0433e8deb96686fd7b3347f0bd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/metallb-speaker@sha256:856c88217d0d0039c5b389fe0a9c912d4fc3664b93a18d483d3215bdfdfc6093
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/metallb-speaker@sha256:b5457197c083655b9d8fc77ed63288bb69d5df4c435962a37472f7e9af3a85bc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/metallb-speaker@sha256:bf36ba4a0770dd6a487ea8e82a618ef8848529d9103aa80a77c9017cdf599085
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/metallb-speaker@sha256:27781f77bbeb3a375ac48acb176f53147e5d60f08914cc306e046298e24ecebf
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/metallb-speaker@sha256:aac20171f9068c3c8030b7685e8f93a49d5ba570ccb00106a7cbbe1e964ef029
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/metallb-speaker@sha256:c0076ab38917b68eda5b7298daa2669a11660856002958db995634ee2b37e0c0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/metallb-speaker@sha256:7ec34d2bea6e6c65211821b08eacb817630be9b813006840a0d60c5676c23cf5
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/metallb-speaker@sha256:e01c6774944edc4bf79706b0eaef20e4b200981537fd76f33bbcf5ce5239d125
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/metallb-speaker@sha256:5e2364838837bc8ca6fe76ee6ab66f0202d6221fc828b9f6436f0339a3aa959b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/metallb-speaker@sha256:6dbab40cc4c159a03d49b39d85e67bb13ef699ab06d7106a3d4c03288c38955f