Sign inSign up
Cilium Envoy

dhi.io/cilium-envoy

Cilium Envoy 1.20.x (compat, fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-compat-fips, 1-debian-compat-fips, 1-debian13-compat-fips, 1.20-compat-fips, 1.20-debian-compat-fips, 1.20-debian13-compat-fips, 1.20.2-compat-fips, 1.20.2-debian-compat-fips, 1.20.2-debian13-compat-fips

Index digest:

sha256:f46789da51f30afcd4c7d57a846b12098ced031818f167781ca80bfc128728c9

Manifest digest:

sha256:dfe19557c84a317bb6104cd81c73ab46b2ad272bc5cdb2f55b72af16a062561d

Size

40.94 MB

Last pushed

3 days ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cilium-envoy:1-compat-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cilium-envoy:1-compat-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cilium-envoy@sha256:ee8900ef050eb8445b086e4cca8fbd90b3419df90f668d64b6512bfd1fd3e249
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cilium-envoy@sha256:8473b35946fd84b454a91adf30f606422ff1a98a05496959109fe60ada70c8ca
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cilium-envoy@sha256:44753694d265f1b7f1767cea5fd49f685b8866a9d599a354df1fac7127f8d778
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cilium-envoy@sha256:a060e7aa3b5b910ee728d94ee37556eb8d6e897c1e48848e86f59cd0d0eb2f91
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cilium-envoy@sha256:4f06ad039fadfa53952d30048a3eca295e27acc82e4779e1c8bce471be0a4e56
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cilium-envoy@sha256:ffabb84bb289e857984a58110ec02b09892cedb7c667661891780b4331e646aa
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cilium-envoy@sha256:8ca8b4c0696549d5df28630732bed00cb59721b9aa5000088668a9dd9f7bca4a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cilium-envoy@sha256:877b78fd0594476db2761c4b920fefd6eccc2b5f182b8510bf19ba57b67ebed7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cilium-envoy@sha256:1a2edeef64fe6bc8f240e5a2b9d417c9ca068f3ab4d07c99c2bddf8391b5cb4c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cilium-envoy@sha256:a748dd27145b8813d07dc3c21de72de4eff142be272dd490f12f6ead417a56e3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cilium-envoy@sha256:8fca45def9440a18383fab615f40f89f2f9a61e18b2ad8c1e0427b06a5c6fc19
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cilium-envoy@sha256:c3d4adf5720aea8eaaf88cb6b25dbd2d5c3eff2919107fb5134f68643da9f5e9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cilium-envoy@sha256:5b3192b61841bcd3d74983ded06f364aa920e53c9c29f544a797ec9613083492
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cilium-envoy@sha256:d27b0fe37d1afd921f1e4cf0ff6490db1d8698a3dead0994ffd24f6dccae8091
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cilium-envoy@sha256:36e29ee9eae1cacf56480e95ec421fc19cdf42676c70a12fff56b04ae42f9468
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cilium-envoy@sha256:00f9142c30c87adf3b4ea11bdb64f1db2d10193d823ad0513bfb1ba02b289246
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cilium-envoy@sha256:908befd6ed2c76bd31fb16292479d4a194f5c5bdf7b3424dd4fc84399938fffe