Sign inSign up
NGINX Ingress Controller

dhi.io/nginx-ingress

Nginx Ingress 5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

5-debian-fips-dev, 5-debian13-fips-dev, 5-fips-dev, 5.7-debian-fips-dev, 5.7-debian13-fips-dev, 5.7-fips-dev, 5.7.1-debian-fips-dev, 5.7.1-debian13-fips-dev, 5.7.1-fips-dev

Index digest:

sha256:97c09f56add45d4147b12bfc6c09e32ff6cd7e700548254df0edba4358e752c8

Manifest digest:

sha256:344e531dec87a6854221da97ddc0bbd30c19ffdc2df6f3da04cfd2e0c05b6be9

Size

95.94 MB

Last pushed

6 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nginx-ingress:5-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nginx-ingress:5-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nginx-ingress@sha256:165866687a45b1b57ea336993809db3690d5c085d982b498f5556f91b8477fc6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nginx-ingress@sha256:d8a4ed8985e2e27a40d551e255c573a0f26b2762f7dd816855d8e90c27a65fa7
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nginx-ingress@sha256:9aaef44539aac5643c8b37dd99accdb02114711246fb64f9f689f0d16fdb4f5b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nginx-ingress@sha256:280198df004afc33618ec163fd4083fe03c1168d1cd4035910545e14088c5710
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nginx-ingress@sha256:1c1bf4dfda61e5f5641ea34965e37c909c810287a87e415097e9e7fad49b6ff7
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nginx-ingress@sha256:692d7883d98a13a237b44fe994f76feea2bdd283d46538614deed2967fc912fe
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nginx-ingress@sha256:435635476638e60d6197cbe0f223e55a7a6f35ae74dac877061b740313d1aa32
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nginx-ingress@sha256:36935ec486737098940898e26838245ee485900540389cbef30c3bc2cc62a209
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nginx-ingress@sha256:dc809bad93bc3df67e908df69f57b4fc8067e118824685e6405bfbb5d349612a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nginx-ingress@sha256:97e93b94d276598459a11399badbc94ea9ac7882c35d8abf358c0e3aebfd7857
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nginx-ingress@sha256:67e4e8712ebd71f50281a988970b0cc9c812d3f06c454c57f1a74ab64d82126a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nginx-ingress@sha256:db09a6fb1ed02d989296384309164cfaed8d78f0e0af5191119a6d0e2127aabe
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nginx-ingress@sha256:cc7090672bc8a1f7a86477a5be0153b63b792b0f79fdb63b2ec163f313db4a08
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nginx-ingress@sha256:460d30d11e9beed3af85a4d823664d0c5696965965066782016446e1ecffa93c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nginx-ingress@sha256:04a17affb242f65df992a42995540fd267cbb59cee986b575db82c79dba8afab
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nginx-ingress@sha256:12bbc28b6e44c9eee6ae410ad675a10eebc473dcbd9eea9811c456c1d6d775de
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nginx-ingress@sha256:613622b9290ffe0cfa3f76ce130b0e85c04d2d2d8e10d423a34b3544431295b8