Sign inSign up
Drupal Nginx

dhi.io/drupal-nginx

Drupal Nginx 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.6-debian-fips-dev, 1.30.6-debian13-fips-dev, 1.30.6-fips-dev

Index digest:

sha256:16fa9d63316e80971b1f9a3e4e16aedb979679276b97b2cab40d74a266d88b32

Manifest digest:

sha256:06f0e2cbb100712cb79127b69c33219dffd7892c06245254493a5af2ca8b5ae2

Size

29.55 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/drupal-nginx:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/drupal-nginx:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/drupal-nginx@sha256:2cc46aa4d693b475ea151b75ec196f4bfa84ce89404b8000a267d8059c500049
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/drupal-nginx@sha256:23c9953938f8b9f47ac7d8eb3897fce9948f1ef3104bbd1dd732eb5a63f0af1c
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/drupal-nginx@sha256:689c7a403b44ccdef36cb3b40a1b940d2252ada4edd916d8f7fe86f08ac77f3e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/drupal-nginx@sha256:9ce34f1920d850070b2290e801d53438447bada56e7104ae97313164bb07d83c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/drupal-nginx@sha256:d7e766c3cbdbfffa0ed96233a43b2220e5f795c65acc304e1c4f7ea70623fc23
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/drupal-nginx@sha256:e5471f1b13343ddee4cac91e57a3bb92111c9d731bd912e1f43c5d5576758543
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/drupal-nginx@sha256:cd1e6a99b78337e9f0ca590895ea0085350d689d20c9de94ae93b95efdc7ade3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/drupal-nginx@sha256:d3487f9a0cbcd5cd3817249c8f1173f3594ec248eb0028ee933c2d42c63624d3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/drupal-nginx@sha256:ed463188fc66511d175950e2a70b07419448881e5c2e646d18175c4ba2683f85
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/drupal-nginx@sha256:8b05a9cc4125c86d014aa005994766005e2a6dd561d63d212e5e186c23cbb311
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/drupal-nginx@sha256:98060534fa92cfcb179fb8e30742675875db804d90f631391e786802326cae78
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/drupal-nginx@sha256:521fc390f8b561a17b25cb0555268a1a145a2ce3a8c9a5f034927bfd1d1d6048
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/drupal-nginx@sha256:a076bbf9e7eb988f888c7421936640d83f8d56fba0165ebdef52459060a04444
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/drupal-nginx@sha256:d145b29ff1551369ae076ed4517bcd8076b73f8e5d17741ff4ed6266f98bc76a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/drupal-nginx@sha256:c1f77a408d3ac84c43b89a7583d594249ee2667ddbf76179baac4093159116a0
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/drupal-nginx@sha256:0ef0a5514a7bf25433557ce3ea29aa928f79445c8ffab1c0334f45838d967e03
SPDX SBOMhttps://spdx.dev/Documentdhi.io/drupal-nginx@sha256:31fc187643e617f354dc7946eae26404fa2a6b18ad9da3a3a871685f856683da