dhi.io/nginx-ingress
5-debian-fips-dev, 5-debian13-fips-dev, 5-fips-dev, 5.6-debian-fips-dev, 5.6-debian13-fips-dev, 5.6-fips-dev, 5.6.3-debian-fips-dev, 5.6.3-debian13-fips-dev, 5.6.3-fips-dev
sha256:c7d643fea6c8b8e3a8554d55edb7ee0313a53a5222a45c1171b3c431818db9d5
Manifest digest:sha256:7018e8c9fca7c6944ae69a586e139c6be7f7d163c0ba14f46ab130347d977f6f
Size
95.61 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/nginx-ingress:5-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/nginx-ingress:5-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/nginx-ingress@sha256:99223a10f8bfd04c085642d6be2920ba259dc2e9ee752f347fed980b05ff01e8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/nginx-ingress@sha256:145f80d2ee9c3761424d1685a8f0ea1eaf9b31fba08600b41885f84459c35f21 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/nginx-ingress@sha256:8dd5accc69fa96b20435c5fecc88354bb256bc58f03b8848da2cfec06a89d46e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/nginx-ingress@sha256:2c726e917109e4c937a29b24aff2ce15c4af4f473c1bba97a571a5f679921bd7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/nginx-ingress@sha256:96f0395955558f6fd92b5f155d4e26f527e60b2988a059f3c160216d6682360e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/nginx-ingress@sha256:2043c75cb39cd3ee7def45765e97f3f037a40a38155e2857e114c64017ffa574 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/nginx-ingress@sha256:5d4d526e07574fc99bd98249de5895d4192049fa4db11789797f40aa80bdb8a0 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/nginx-ingress@sha256:ed7568e45dd68256a8fb1c6e455fa047dbf0aacdae661b424599316e15675597 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/nginx-ingress@sha256:89e1d20a31d0c9c43058a98d021622f5a41adc996775b60e25b484e5570c7d27 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/nginx-ingress@sha256:056405a0f1f9efbd10873cc2009d089bb570d05ba35fa0b8048ff8d36bdaa57e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/nginx-ingress@sha256:e7b9252734644a8a0af9496cce2e13ff2a92331fe6300b0f22538a767e7e4a48 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/nginx-ingress@sha256:ac87549058d646e00c8cadbd3922dae3c45e695fa802286413b7e90742878e52 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/nginx-ingress@sha256:8b58b5a94aec70dfb2338ce70e455e5fdc1e0b6b4e092fbded7f8aa9701f08de |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/nginx-ingress@sha256:3f123dc91a37d1dbf74346dcaadb1f7f9274b4640f0704798034b54a0327ce88 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/nginx-ingress@sha256:341fc14bf903c7169f59161b2e5f9d42543099e1ff1f4fc2b28ad0d700db4585 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/nginx-ingress@sha256:665a7d774d9b895a032073811ae773d7f6532e50a4983b3b718ecf2b8b034e82 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/nginx-ingress@sha256:5fd0b6167020e16fb5bf71eedbc9aff40f5d07a26643e3a60819fde32e0da72c |