Sign inSign up
Eclipse Temurin

dhi.io/eclipse-temurin

Eclipse Temurin 8.x JRE (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

8-alpine-fips, 8-alpine3.24-fips, 8.512-alpine-fips, 8.512-alpine3.24-fips, 8.512.09-alpine-fips, 8.512.09-alpine3.24-fips

Index digest:

sha256:cc5ac8eacc6583a45f2c897a0a9caf73c2b6a43025f33afc5cc820d91551b850

Manifest digest:

sha256:c4033ee4f52dccc7b9f84b74dcebfc55ad6da725a3625c04f1752378ee33be6a

Size

47.66 MB

Last pushed

5 days ago

Vulnerabilities

0
0
0
0
5

Support

Active until Dec 2030

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eclipse-temurin:8-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eclipse-temurin:8-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eclipse-temurin@sha256:8e6e85a70214d86394c3cc64778e167c9f8ef96528a5b1ccf99ceb2880fcbaf8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eclipse-temurin@sha256:ad931c0d256529edb6f50f823d3fe7281e485c4fd8af074eb79a89029bfd8d3a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eclipse-temurin@sha256:81a0e68f602cf8b599bead00b4d498a542dea8d83eca1c552544af34c2041270
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eclipse-temurin@sha256:1ee973e2da1910a3a46fb2626a9e1a69bf8761ceb97aa292c383d5b6f3ff947a
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eclipse-temurin@sha256:1050c409c7615d364f274c7329e7e966f85da51af84e3c2ff9ce4db7c4b7ff1a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eclipse-temurin@sha256:372df9d7f7a03bef0fbfdd2e43b3052586939bbe13180d0607ed53be5508c804
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eclipse-temurin@sha256:6e02b24d6afadd644c52f2e8445a3eda554330e410e6d0564512045ef6ee28bc
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eclipse-temurin@sha256:1e8f89cb55bf71efb74397c344566bc48893b4bf25b5701e9fc6b6f07959c7c1
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eclipse-temurin@sha256:706b5aff589033256d8bc418b6f3dae8893bbd9f0dfdff99fb7c3971964d1bce
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eclipse-temurin@sha256:877f3759a57a235b7419498eb800b66d131f18ef90904d871d3e17d55bce88d6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eclipse-temurin@sha256:bbf89c2bca2c81a22930d8f7af423fe4e10281526534085f2053be65f6896c0d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eclipse-temurin@sha256:d5e982e1a1bef7b7b19b13c1c1970867cad8ba47fa5bd38e83f2e8150bd1a83b
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eclipse-temurin@sha256:5fbdd68351b5b8b79cd1d9dd551b3d9cfdc4361891a25edef9c84ef8e695ce61
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eclipse-temurin@sha256:365027abe9c24f15cf8fa800cd8deb821b956f00b068b8e2d9a71dcf351783e6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eclipse-temurin@sha256:85b6b0943581fd74512c6444644e8550257118328d45e6fae8fb61f2f0143bac
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eclipse-temurin@sha256:cb428b57ac939bc8074de28ad7d6c0c8e0d6218ec643de7b5944b82570c3768b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eclipse-temurin@sha256:f943143ae315fdcbbbff12f14733ea4ceac6570dd28f5b008bc26d66d292477c