Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:ba673633cc021687aafbf6d9c7d1b855ec397ed5533384d8e8473c47aa0d52a7

Manifest digest:

sha256:73e932c31c953a9a7a9b1e7d6fa781d1f54f640a7397eb69e55141ab0179b3f3

Size

196.93 MB

Last pushed

2 days ago

Vulnerabilities

0
2
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:1ef932c0c55469636ae464e71855caf8b808b96edc6566bce0755d82a75de76d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:5b4ba77b8db1b96bb4057879c302008e70e3c7c7d0bcfd41b5e379358f796654
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:f34ebffb2c49277b1213afa671c1a59f3e3e823f4f7e8d3b8233d87c037376f6
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:3754068c3a8a8a65d460e5fda487a2ad218087322984bbb6bcdc38341fc26a60
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:80c06fb10d747c2c6b7eea20eece2b8dec4e8dd8dc21354d3c7434257788cf26
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:b42bf57dbf0e8b7133f5ef0500b7511dedb3af1d8c9793b7b2e93da37522c853
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:1d318f87ad335bfa8ca0204929dfd8b70e2de2c3e5e988ad4b33be1508989062
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:050ebdc3d2b316bde4b9cde479b6883f18f0160969f2de7538c555fa5e7563c0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:a65ca20997ad7b46d01b4f4ddd6044b3314efcde856b6eff62997ee1ac0edcdc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:72a9c7838d6a0af40bf3da834b7d94b37b7dbdb6debdbcc33697659335def3e6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:a8bde8f78ae51468fa1f677210664b0e7f36b5646624dff8fddaeba5aaf245ee
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:6d0a14a1d5928bc71e4271e620d24d1b4b2e77f0b0495f4a161de46c9be1f322
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:854554eade4eda361bf818461bf0758e7b7011bffc486a7b8e37efeb1c030e75
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:5a90d708c6d791ff15ceaacb9b7575e8df18498cb656f192937537be0f2502ab
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:3bd5816925b8eb94bf7e2fb66b5a3ea45f79195857ad130b3a7eb4c7982a164e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:f2b833a0c01059d43220944a85087d1d2b2d82afb46721cc01997a41b7c7ef73
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:7955213e2f777c81055110a446650aedf99d29eff8e19ec301bc9838aaf5ffb9