dhi.io/clojure
1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev
sha256:18b9970f91863649ac778269b01280697130e3e11c0717aac975dff017e6336a
Manifest digest:sha256:1d637b0801adb2bab310e779fea67e6da88b02b99daa86c337221aabe84025f5
Size
196.92 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/clojure@sha256:a3c6e216fb2a79e74b77088c5b3d2cc7f2d22d34f0c1f15512f95a17a2ef9e63 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/clojure@sha256:729ccf96047cedfcec05ff673ab5878334c9170735bb6be52e81660961ca721e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/clojure@sha256:57d026dce92de3c9084c0e971f8a0dc982d4801037842d763ced3a5600c45d18 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/clojure@sha256:102e86e4c1f47f46c6b70162decf1697e74c944ea0feb096403a0d8c6a685427 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/clojure@sha256:8ed805cc457c8bc21bc721a89c7bdf62fc952964f26e413ae9b263970b6b6a0b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/clojure@sha256:5e44395f502d1bb66522b1a893474f45fd96c8ecc451e83659805d337a9e921f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/clojure@sha256:687b178c51738d6e9d143d97799adf3373536f15d8fa6eaf9323dce345048d94 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/clojure@sha256:15cd925c576383e27c3afb61068f61544b68a70c21e7d0fb335970c39d28cf46 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/clojure@sha256:6e7d283bbcbe3b1de541a45d013cdb07e039d28d74bd3e15f3d59713747a1c60 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/clojure@sha256:38d068f01b1958263306456753f21bf537fa17686c44f5150b6b837d03475c4a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/clojure@sha256:c7d03ae311ee4b19cfaa1b5882d05f54380f7cd6c303d7f6012c661b8d24bb30 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/clojure@sha256:0be27f7537778a475de90c1de10dae114df0fd009606a654d5b0c76a4620f96c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/clojure@sha256:1210bde13fb7e869f0e05b229ef809aff2bce3feb18bef001ad4d9f09ce516ca |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/clojure@sha256:231d25ae0fc0d7e8575f0fe5d8441952812cf004cca3abff101377a062c457d7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/clojure@sha256:ee8854773da9df8553fae71c8101c530dc6297946c04e72125f477ee48520579 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/clojure@sha256:c60f89395dcfa5bee8b1ba11ee0f9f615e3c1ef770d6a9282b3b4b854987c13a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/clojure@sha256:b606e9b1f42672924f9d72ff651cc54ba51124852eba5bf776e59536bea8e713 |