Sign inSign up
NGINX Ingress Controller

dhi.io/nginx-ingress

Nginx Ingress 5.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

5-debian-fips-dev, 5-debian13-fips-dev, 5-fips-dev, 5.6-debian-fips-dev, 5.6-debian13-fips-dev, 5.6-fips-dev, 5.6.3-debian-fips-dev, 5.6.3-debian13-fips-dev, 5.6.3-fips-dev

Index digest:

sha256:86d2c338aff250223181a4c627abec3f7c52647f931b86573777b832188ee846

Manifest digest:

sha256:7c927a9e05820509ca5552ed8d1bb80460db3194b271e0aa28e8e750f4543bf4

Size

95.61 MB

Last pushed

1 day ago

Vulnerabilities

0
0
1
1
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nginx-ingress:5-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nginx-ingress:5-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nginx-ingress@sha256:d5b20c95f0243e4c890066947779416b6494d49f0d7f14a22291d9b85b382fce
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nginx-ingress@sha256:603913e7c3c4802095bf4b0e7c1422b9a7ae750266df624dca0f98113834ce6e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nginx-ingress@sha256:c98ee6634f7e950f3550f8f19d1e20a02167bd6e760201ca13910ece018c6aad
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nginx-ingress@sha256:448e38acf157142bd655a7ad0422e6680944c4878bdda28758f3c1e3d96c8dfd
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nginx-ingress@sha256:8647c1d429ec44430c8e26a2f80cc72f40110565f04c70b47baea66acebb81b2
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nginx-ingress@sha256:3fcd6bcf53d8a297030f21d333ec9bcd74cce94883ab82858c1e794e2c53dba6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nginx-ingress@sha256:08380cf1c19c9d43c5de0f7ee998802c4b7c6cfc354b534d63326eb66f8f27ba
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nginx-ingress@sha256:8036764882268fe343b0ff0f35038caf5378a4a9fb07c53451f0ec953baf9630
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nginx-ingress@sha256:e4451e84ac486b4327859f59f567b319b5d57ca7cf7c22c3293d173170410ec3
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nginx-ingress@sha256:a71cd0b5908e104e4247daaf10339978ea2729cd8e2cba6425d42de0213b09ef
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nginx-ingress@sha256:b1b09a02f0f17e476bc2383097d30349e9e20b5b5907a38cd6434cb48ba6ce0c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nginx-ingress@sha256:5bf5aa751801c9d90b71c0b3251b29df2f0dc965fc39a6892d2f484acdc53f00
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nginx-ingress@sha256:bcf2524aa8d91351ec766652d9e6881b4e8c5213c9d3b7e906c883a7b1d17203
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nginx-ingress@sha256:a768289bd812ce3d69d11435a42f43891015557ef5909fe38da695a5d76545ac
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nginx-ingress@sha256:17527dfa68873da9b2f414ec0cee78064aada7f11685fe654164c4fb38d7bd3c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nginx-ingress@sha256:a79e9505d2504ef0941a15b9cd90590704b8bd97334c99d951aee9b3656ce453
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nginx-ingress@sha256:58f1be33723ce45ff42b7a35740bec225b2d06e80b9e22c75508b48d49ea63c3