DATA PLATFORMS // IHL-CTR-0009

Elasticsearch

Source targets and exact catalog records from the verified public GitHub snapshot.

LINUX / AMD64ENGINEERING PREVIEW

GET THE IMAGE // SECURE

PULL. PIN. VERIFY.

GHCR // ANONYMOUS PULL

docker pull --platform linux/amd64 \
  ghcr.io/foxtech-consulting/elasticsearch@sha256:c3cb3ce0052464365b7d730eaab28106552372247ce3590a9e90a17df0005411

Anonymous pull verified Oct 18, 2026, 12:38 AM EDT. Pin this digest in Compose or Kubernetes.

Version 9.5.5 · Elasticsearch Secure · Open GHCR package ↗

BEFORE YOU RUN

MADE FOR YOUR WORKLOAD.

Requirements from the public source recipes. Review the exact selected image and configuration before use.

Usage guidance for this source target has not been reviewed. Read its exact source and original publication evidence before choosing runtime settings.

Read the source recipe ↗ · Local build instructions ↗. Local builds remain unqualified.

KEEP THE CHAIN OF EVIDENCE

INSPECT WHAT YOU PULL.

The download check, publication signature, and source binding are separate records.

✓Anonymous bytes checked

Manifest, configuration, and every referenced layer.

✓Publication CI signature

Recorded verification and complete signed annotations.

✓Public source bound

Signed GitHub snapshot identity is recorded.

The anonymous byte check did not repeat cryptographic signature verification or execute the runtime. Publication evidence ↗ may require GitLab access.

Verify this exact image with Cosign

COSIGN // ALL RECORDED ANNOTATIONS

cosign verify \
  --certificate-oidc-issuer https://gitlab.com \
  --certificate-identity https://gitlab.com/indianhilllabs/indian-hill-secure-containers//.gitlab-ci.yml@refs/heads/main \
  -a assurance-tier=secure \
  -a source-revision=a68c84447fe3675f00e0b45a60c02911939bf604 \
  -a assurance-manifest-sha256=9383b102e60d763e9943497190a78bd39aca10912b1c2b21d537fcafac258e1d \
  -a public-source-commit=d6e37baa603dff78768ce3e7566dd4f41577a41b \
  -a public-source-manifest-sha256=7e02d12a92f842d828d60e33084a9230aaa58fbadfc2b9307acf14c93dd909ed \
  -a publication-context=engineering-candidate \
  -a release-registry=github-container-registry \
  ghcr.io/foxtech-consulting/elasticsearch@sha256:c3cb3ce0052464365b7d730eaab28106552372247ce3590a9e90a17df0005411

Requires Cosign. This command checks the recorded issuer, exact identity, digest, and every signed annotation for this publication.

RECORDED FINDINGS

AT QUALIFICATION // NOT A LIVE SCAN

0CRITICAL

27HIGH

145MEDIUM

96LOW

268 total matches · 0 negligible · 0 unknown · 0 CISA KEV matches. Secure reports findings without making every finding a publication blocker.

These are engineering previews. Tier names and successful checks do not declare general availability, FIPS validation, or qualification of your deployment. Read the verification guide →

DATA SOURCE // GitHub public catalog ↗ · Snapshot 39523edb · Retrieved Oct 29, 2026, 11:53 AM EDT.
Catalog inventory record updated Oct 29, 2026, 11:45 AM EDT. Individual image and blob checks retain their original timestamps. This website uses a pinned GitHub snapshot. These checks are recorded evidence, not new scans or downloads performed by this page.