dhi.io/nginx-ingress
5-debian-fips-dev, 5-debian13-fips-dev, 5-fips-dev, 5.6-debian-fips-dev, 5.6-debian13-fips-dev, 5.6-fips-dev, 5.6.3-debian-fips-dev, 5.6.3-debian13-fips-dev, 5.6.3-fips-dev
sha256:86d2c338aff250223181a4c627abec3f7c52647f931b86573777b832188ee846
Manifest digest:sha256:7c927a9e05820509ca5552ed8d1bb80460db3194b271e0aa28e8e750f4543bf4
Size
95.61 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/nginx-ingress:5-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/nginx-ingress:5-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/nginx-ingress@sha256:d5b20c95f0243e4c890066947779416b6494d49f0d7f14a22291d9b85b382fce |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/nginx-ingress@sha256:603913e7c3c4802095bf4b0e7c1422b9a7ae750266df624dca0f98113834ce6e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/nginx-ingress@sha256:c98ee6634f7e950f3550f8f19d1e20a02167bd6e760201ca13910ece018c6aad |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/nginx-ingress@sha256:448e38acf157142bd655a7ad0422e6680944c4878bdda28758f3c1e3d96c8dfd |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/nginx-ingress@sha256:8647c1d429ec44430c8e26a2f80cc72f40110565f04c70b47baea66acebb81b2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/nginx-ingress@sha256:3fcd6bcf53d8a297030f21d333ec9bcd74cce94883ab82858c1e794e2c53dba6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/nginx-ingress@sha256:08380cf1c19c9d43c5de0f7ee998802c4b7c6cfc354b534d63326eb66f8f27ba |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/nginx-ingress@sha256:8036764882268fe343b0ff0f35038caf5378a4a9fb07c53451f0ec953baf9630 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/nginx-ingress@sha256:e4451e84ac486b4327859f59f567b319b5d57ca7cf7c22c3293d173170410ec3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/nginx-ingress@sha256:a71cd0b5908e104e4247daaf10339978ea2729cd8e2cba6425d42de0213b09ef |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/nginx-ingress@sha256:b1b09a02f0f17e476bc2383097d30349e9e20b5b5907a38cd6434cb48ba6ce0c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/nginx-ingress@sha256:5bf5aa751801c9d90b71c0b3251b29df2f0dc965fc39a6892d2f484acdc53f00 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/nginx-ingress@sha256:bcf2524aa8d91351ec766652d9e6881b4e8c5213c9d3b7e906c883a7b1d17203 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/nginx-ingress@sha256:a768289bd812ce3d69d11435a42f43891015557ef5909fe38da695a5d76545ac |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/nginx-ingress@sha256:17527dfa68873da9b2f414ec0cee78064aada7f11685fe654164c4fb38d7bd3c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/nginx-ingress@sha256:a79e9505d2504ef0941a15b9cd90590704b8bd97334c99d951aee9b3656ce453 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/nginx-ingress@sha256:58f1be33723ce45ff42b7a35740bec225b2d06e80b9e22c75508b48d49ea63c3 |