Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x

CIS
linux/amd64
debian 13
Tags:

1, 1-debian, 1-debian13, 1.12, 1.12-debian, 1.12-debian13, 1.12.6, 1.12.6-debian, 1.12.6-debian13

Index digest:

sha256:40ca629e652f91a52547bce42269f9cba1c68ccab4da2910646848044d9fdcba

Manifest digest:

sha256:6b2080c3c869a201f411c2efa65f9407c334bd9c5fa8c84fc819bb0582aa4627

Size

111.23 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
1
9
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:ce0f129f80034c1701e262b5dcc262622a7aa4df0f768c1537e7b4e1bceeeae8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:2c6bc61b87f53394c54f41fb3bfb3dc4f9fe172e2c7a0c44198b5ecb0a59969c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:d1abb8dd0fe941c30a852ae261d27503708ec47f8b4d0b4b84df35793f367542
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:23451078d57543dd38168fbab3a4d9e0a89bcca1004800e3238ade950dc1517c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:2a884db8a94fc8bfed49fbc60c3a178c42a7c708dadba54bfe654762cbf5562b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:b16bf63ce2a7e3e4884055daca64aefdce741576ba1a332a4838c10bcc215ded
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:58843d2306f5761a89fe784baa21e21e14b9ec07cabf0f7a800c1204f50198a8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:ada16eba7cf15a65eaa6806f1dfee315749ebcd2c4ee6a5a7303bcbcdc576de6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:40008dbc51d710d0ab85e4fd9c5a5bf7bb6c93a3408426f1dbaa64dcdbddd699
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:52574798045ed1d016741a00a9cd98c6f3c2a67c5575e5ec0353d4cee5f8489e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:ecca097c2f3526963683e4df5065c1229924c8c660426d7fed56d34e31973a92
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:b727065690118da0eba28fc7a759b4e7fdcb2f34401aea09c1c5733e887209d4
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:3442bd1c18317e58ae24fb836c183641a228414305ce854746fa5cc823bbae30
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:bf5c4dffffc32537d93613bca0472f25dfb699efb78705d38b6a544c648af710
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:27c01fd634fb30b10d8f38dae4345e17b8a1266d719997bead23c402286fd8c6