Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:b1dcb9ef6a6e1890f82685736b51fb6225e15204026f9e61cb507d3a67cd639e

Manifest digest:

sha256:c1f11045c49095825b839dbead8edf98e537d3bb90a3d7fa4827e1f422e5f835

Size

196.68 MB

Last pushed

11 hours ago

Vulnerabilities

0
0
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:e846ea34bcd0de4b31c69998c3c8c37d30a564e2fec29e8ed40051d37235a2c4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:69c59a14f5404e8663988d6e73bef4841bf42d1337133bc96797124bd64e6c32
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:7d2be58b9921aff7d95e1c565ba1db231bf2c85f547e5b0b53051c016d6a553e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:3282d0ce7024f4979916b10f8b54befd3241f72ffdcd03174cbe1d141bbb66fb
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:fdb7213497059224d551ea7201cfa4d0f7f95a402bfacd30bab6b3a9cef3db0d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:e1ad7c7a144e87d6f58084b644d0ff73bd97e862421111ad654163c71176c308
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:99e1ac5bca2e504bcaa05f7bb3ca6473d69c8b201f09c0a8e43fb3dae1793855
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:3c1cb54afcce9381e51f5ae0bc1a2d17ac64df68b13900254d00c116bfc72d04
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:e7fd301cce811fff8e2f1b6e936d9930f154f8ae46c0cf391f716137c6c462fc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:fcb762454cc573ebc2bba05a9ffc632826e77f275319aad3e5fcd600a0ccdd7f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:39929c8209542c74a8b496cec848c401c33a6e773ea2f710a3494db35524f1aa
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:c09031c0ad5c1a7e0746cc010f642d9e2c33aa37390c98cfdd60f9a0db104a3a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:1c99ad8968ccff0bb40345ead433fcce691db027626e4deb9cfd8808774bf5b8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:dfd3453df5611c561bc93858ee30e2512d653bc07b08d56feb361620f0a92002
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:21ca3d4b0e4bff96bb5a85b69cd2d59cddec32659a02ed743c8e6c5f5cd73870
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:914cfdac5f1c7188fa80b33ce16825e3409f5184759cbe266da7280baf5cc77a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:e709de04f88abf010c96635d44c8315814158edf51f5ae647087b50ae365c1e8