Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:79921d64ea964b32a2bbd36fe9842343a21e124541e415e8fcd39c0b9a61129d

Manifest digest:

sha256:04974df7b2779fd27c7805eef6cdc76612af58a840cd2ad781cab04b175a8543

Size

196.93 MB

Last pushed

8 hours ago

Vulnerabilities

0
2
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:0a62c995fba8239daec1c2fb38bbcfe722cf1e635bc45090e2c894cc64f811d9
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:028ac9a9e0fb0ca517f4b326d370a65906e9a0143c4437dab6f37dbe2dd9d1a6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:4f184747f324295b3b7b15596c7ebf90ccb1921f206894696fbdd1d17e3f066e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:99e0284e3bd2ac2ad15c3a8d3aef21d886151fd3e7e4d74f92083d91e9334d23
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:1040b573678be7127bb866ab74b10b331e772036aa70fd4695e1ac19185df86f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:2a9753aec1d85f73a0e2e0f7722978ae4cefc04506da08443758b8574f2a1a61
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:f276f592e9062075d18f6762febc5139b14cd77ee6088f252842db9ef99291cb
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:8058fc721119ab353ca74b3d01cd473065873c70319525293d9676433e9cf048
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:182a07424207f08d56b6e044eb5a8a6f3430dfbb5a9fcbf3b5d671f4bda02780
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:d3b78ae0202e52ab9d6ae05a42a03792776feb8925a48b1f25aff269ce1a2a1d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:3c903ca84ec8c970c8823180e0de76573f8971eeb1f618cd276eab05d7e76f83
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:e9087c1dd1902823d186b4a5286b2ed848505c886f607a58899a2ffacecc606a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:462b4cad1c25b7be418571a7eb2e8bb2dcfce1a774e983e7c6686408345f1118
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:a576eb7d548b1ed1d715db5d90376fd49d50da1cf2bae103260cfb29171cc75b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:708bba8ceb1be27cbba1e1530d86d3568bd4f90db39cc40fdf4b8131f284cbfa
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:120f1911d81224f7fc3659845dd63477e4dec65f166a210e8436cd5c72b79582
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:a63c8b1e323298bc2aa461997c03199b15c4043cb4412e92c0ae478ff1e1b066