Sign inSign up
NGINX Ingress Controller

dhi.io/nginx-ingress

Nginx Ingress 5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

5-debian-fips-dev, 5-debian13-fips-dev, 5-fips-dev, 5.6-debian-fips-dev, 5.6-debian13-fips-dev, 5.6-fips-dev, 5.6.3-debian-fips-dev, 5.6.3-debian13-fips-dev, 5.6.3-fips-dev

Index digest:

sha256:c7d643fea6c8b8e3a8554d55edb7ee0313a53a5222a45c1171b3c431818db9d5

Manifest digest:

sha256:7018e8c9fca7c6944ae69a586e139c6be7f7d163c0ba14f46ab130347d977f6f

Size

95.61 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nginx-ingress:5-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nginx-ingress:5-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nginx-ingress@sha256:99223a10f8bfd04c085642d6be2920ba259dc2e9ee752f347fed980b05ff01e8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nginx-ingress@sha256:145f80d2ee9c3761424d1685a8f0ea1eaf9b31fba08600b41885f84459c35f21
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nginx-ingress@sha256:8dd5accc69fa96b20435c5fecc88354bb256bc58f03b8848da2cfec06a89d46e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nginx-ingress@sha256:2c726e917109e4c937a29b24aff2ce15c4af4f473c1bba97a571a5f679921bd7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nginx-ingress@sha256:96f0395955558f6fd92b5f155d4e26f527e60b2988a059f3c160216d6682360e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nginx-ingress@sha256:2043c75cb39cd3ee7def45765e97f3f037a40a38155e2857e114c64017ffa574
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nginx-ingress@sha256:5d4d526e07574fc99bd98249de5895d4192049fa4db11789797f40aa80bdb8a0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nginx-ingress@sha256:ed7568e45dd68256a8fb1c6e455fa047dbf0aacdae661b424599316e15675597
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nginx-ingress@sha256:89e1d20a31d0c9c43058a98d021622f5a41adc996775b60e25b484e5570c7d27
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nginx-ingress@sha256:056405a0f1f9efbd10873cc2009d089bb570d05ba35fa0b8048ff8d36bdaa57e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nginx-ingress@sha256:e7b9252734644a8a0af9496cce2e13ff2a92331fe6300b0f22538a767e7e4a48
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nginx-ingress@sha256:ac87549058d646e00c8cadbd3922dae3c45e695fa802286413b7e90742878e52
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nginx-ingress@sha256:8b58b5a94aec70dfb2338ce70e455e5fdc1e0b6b4e092fbded7f8aa9701f08de
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nginx-ingress@sha256:3f123dc91a37d1dbf74346dcaadb1f7f9274b4640f0704798034b54a0327ce88
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nginx-ingress@sha256:341fc14bf903c7169f59161b2e5f9d42543099e1ff1f4fc2b28ad0d700db4585
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nginx-ingress@sha256:665a7d774d9b895a032073811ae773d7f6532e50a4983b3b718ecf2b8b034e82
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nginx-ingress@sha256:5fd0b6167020e16fb5bf71eedbc9aff40f5d07a26643e3a60819fde32e0da72c