Sign inSign up
Tigera Operator

dhi.io/tigera-operator

Tigera Operator 1.43.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.43-debian-fips-dev, 1.43-debian13-fips-dev, 1.43-fips-dev, 1.43.1-debian-fips-dev, 1.43.1-debian13-fips-dev, 1.43.1-fips-dev

Index digest:

sha256:2f6741a1f3782530b463aa9acd0012049dfae48b22a322f67672b45b8ef2cad2

Manifest digest:

sha256:7e26feeefb8783b31ea7a15e7bddb4454ce0281e93a47eb96bf09b76f8893356

Size

63.40 MB

Last pushed

14 minutes ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/tigera-operator:1.43-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/tigera-operator:1.43-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/tigera-operator@sha256:044d9c36c56f72c23a99d30d2a236caf7f51f2b5b1caa7c3afc7c61c6d28733b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/tigera-operator@sha256:ccf7fcf1b101ba148c1615323c716f9cb8757692ca9869ae7ab9c9f32118ed73
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/tigera-operator@sha256:201f34451d52a6c5e03fa99674bb6f5f5ffde770816c1447ae7140264babde4f
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/tigera-operator@sha256:670a369844ddcb00d109755be8e5dd65c5bccb9f0d64aad8a85270d1c8620728
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/tigera-operator@sha256:d47d993abba77ba3b68f33fe75ad786cb3804b5570719ac4a9869809779dffe5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/tigera-operator@sha256:ee76f55ee8f62b78eedc28d3e7736fc0d5f5a69c0890e0c0827e17feca615a97
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/tigera-operator@sha256:d04de864b725229f5f8db4e8bf2de0be8e767cc44dabbca1876b21dfaa238468
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/tigera-operator@sha256:4cc8242e1f72434b6688a0eb3f0a8a5c18fe7afa0e917fe1af26b6d7c5cad9a4
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/tigera-operator@sha256:9e5d1076bcf57e7ee22218937c62a83d0a063d1b5b31029fa0bd65bf1d2d2284
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/tigera-operator@sha256:9d05ff462e431cdddbd43b73af6bec69661e0b721e2ca494e39798ace559313e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/tigera-operator@sha256:354257ee6b323df3e37087590f4ae517f775af2169d1fb02e55b3d4b3f1b5fcc
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/tigera-operator@sha256:1fe5a4dd9016a2067b6852e3d3ca8cff9bbf0c504d1a3a54bbde0f0adf8ba5a2
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/tigera-operator@sha256:21b4bebd3ddafe1243f3e84f78a4b7cebe25febdca4876316078878b7a366419
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/tigera-operator@sha256:747aa878944cb3275603ada9e47d3a6a0298503b1a774c97d5d44e4db6e5e7cf
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/tigera-operator@sha256:99c4199554ba17d80101062a6d9db819d0e85d2027057c795d01725cfad5b5c4
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/tigera-operator@sha256:29cdcc1fa908d6295aafc106f40815edd5abc3621efd640bdc8f1c529dc0efea
SPDX SBOMhttps://spdx.dev/Documentdhi.io/tigera-operator@sha256:e20f5cc05239a42a76e44da5791f5c97de61a3584b1b962d28fb79833356319e