Calico Node

dhi.io/calico-node

Calico Node 3.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3.30-debian13-fips, 3.30-fips, 3.30.6-debian13-fips, 3.30.6-fips

Index digest:

sha256:2b1fc5c3940c85b347b7b2aeb28697d5a0ba6e6e72b2e68fbf798af1ec2952ed

Manifest digest:

sha256:7fee56cabf1b2dada3853bbfa9e65893dc3905c9d7313598ec7638cf55e5e76d

Size

58.97 MB

Last pushed

7 days ago

Vulnerabilities

0
1
0
0
0

Health

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/calico-node:3.30-debian13-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/calico-node:3.30-debian13-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/calico-node@sha256:555b4cb91229e90f38d12499314bc1941410121a2adafd493aa5b9a80cdff35a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/calico-node@sha256:bf2bbcb9215d993544c5f8430afa2cf3aac8e84d94e3ed3db41861db92ace57c
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/calico-node@sha256:7fe1e9a98f31d299642b00a92d3ce0681ac0bbefe550e0c29b0b5ebebee15e02
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/calico-node@sha256:321850c3f2052364a1a5ffd8eda32e7ffa81878bbca0e3880b2320876b0d7c41
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/calico-node@sha256:5e238ae4c344b3d021ee83bc7852668e7d8e8676f692bea8990ee98d90d9506c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/calico-node@sha256:3f0cdf948804a51b169c0fd49bdcf5cd1c8cb0252b5fbcb387baf46bb13b3d70
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/calico-node@sha256:8db43924dd7a28e1a7c750b11decfce881a39f9fde843ea79ac0d4f1f5db8624
Scout health score v0.1https://scout.docker.com/health/v0.1dhi.io/calico-node@sha256:7be3f3de067820195e9d4c05da96ab0bef8a55a4ba24ba15287c9840cb165b4a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/calico-node@sha256:0d547ae9154032826efc9c3bbfab2422674b0b511473c6a21c75cc9e1b04ce36
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/calico-node@sha256:c05e7204a8c9029ffbae953bffd36e3c2722aec5bdee75cc202b67350d25b83a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/calico-node@sha256:63928096d64f004ede66558e4c935e9848b13749a41df5728989f5a5d488e27e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/calico-node@sha256:66190cfc61625160234b6245018a9261cb80617048268e9197f276620240f472
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/calico-node@sha256:6ccab3c451847ad56cbc21a435f142ea6c3e506bf00ef2670aeaeb33862d060a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/calico-node@sha256:c663b486ed164d5b0da886bb94b4c0f4f1e4a85a3d47e4b9e0ffb907cd376761
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/calico-node@sha256:8e1f48a05025181e1746a59284cc25f736d0d63fceeee00eda51ed1e7dada691
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/calico-node@sha256:cc00aa381982fb439407024cf8ce03b0defbf9c06f5d8835f99326b969d06462
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/calico-node@sha256:d4c12423156b9306841f41ae245d3d40efbac04f1b2ddc325aaa831df93d279b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/calico-node@sha256:9cae1870b586e5f9aef749dc56ce0fa52c84a57335ea6a9ad2293a543ef37285