Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:07cafb6ab482a7e668aae9d92ca70b0728b85bad84154793a1af0fe56cc5dbbf

Manifest digest:

sha256:5ed19a6e6adca478e5b97a794ff3a7fee5c865e232ae4a5f7048d4c5360da373

Size

197.23 MB

Last pushed

4 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:b7591346318cb32a34c5417b3a8fba4efc2ed0c4a4d058e6146b73e35fb5790a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:367ad9f7be4eb4400c7874d5c2c0896c5997dadd711a2d03e056d087bf8cba47
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:da48e338d05e0944b7f7d0b81bfa9e9ca2121a5a6660338aadbb26c5e88ea0e2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:e99f98c64cd07c9d60302d3450302d909272186225ec700eccd4af155e2c4ef1
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:0d9193aaa905be3d51051726122bc12547a810bee6275d1adb99ab0c9ff3830f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:1778d6ff5b223923d27186480ebd41bd908695d1262e3a4cd6d2d6e5093382b6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:8e6273183f213fcd5bdab3e00a580e8e1535b6c50eb9d1b8464ed65adef35845
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:a28c4ce7d535349887858577406d4ecb90b3ebe8bd39d10fa6a8e5d1c7642f1e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:9b4700242e85e0e651521ea62e8f25c89755011d97b3d5c94c2de76afc3cb2ba
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:d7c8d54c31da308e9cd859934016728f216198d6c79d384ec400a1beef1136a0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:fa0ce897fb273174133126e6378a718f755f635fa8ccc117731b2228ea4489e2
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:d486137f2776f972eec1838bb64302528f090c422c5056654e0c732bfb07ef06
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:f9347c8c80c34f94e1033e471c9ec8f9207263e9a558eaacecc5542a353dd3ed
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:47f60ccb6ea1de0ef826919402221fb65389555b29fc5d305ad5750caafd8020
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:e3b53ca6f9dab4b4a2a48a044ae02aca514e4422388a50f712e2375a61bacd5a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:4bd9a7445cda8243e624b5b538ca9670c4399dff741997d9ab4780386c549971
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:210da976fc51666b4979db7bab6af8bfac3d614be8cb1e1bc44fe02e8f7d8f33