Sign inSign up
Eclipse Temurin

dhi.io/eclipse-temurin

Eclipse Temurin 17.x JDK (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

17-jdk-debian-fips-dev, 17-jdk-debian13-fips-dev, 17-jdk-fips-dev, 17.0-jdk-debian-fips-dev, 17.0-jdk-debian13-fips-dev, 17.0-jdk-fips-dev, 17.0.21-jdk-debian-fips-dev, 17.0.21-jdk-debian13-fips-dev, 17.0.21-jdk-fips-dev, 17.0.21.9-jdk-debian-fips-dev, 17.0.21.9-jdk-debian13-fips-dev, 17.0.21.9-jdk-fips-dev

Index digest:

sha256:adac3f4ccd9ff05561fbdc160a7a7721a8a66e11a7d9ea436b8e5d94553d1adc

Manifest digest:

sha256:ccc1bcd777c817686f4d07ee1c4440fe974aeb54dd4365c21fafc8b4db2ea18e

Size

161.79 MB

Last pushed

1 day ago

Vulnerabilities

0
2
1
25
0

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eclipse-temurin:17-jdk-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eclipse-temurin:17-jdk-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eclipse-temurin@sha256:7c9df182cfe4084e925924da2353f7eceada4f9a5bddbf0e4f463b164df65535
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eclipse-temurin@sha256:669a03955dbaf58b18c1da3d794295de691d053666cc64fd914acfb973cd2869
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eclipse-temurin@sha256:780ad6daefae32e73be3340d151256a640c0989f75457e1a76d2835d6156533c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eclipse-temurin@sha256:9b2af1a2b95697371dc0a01524f88a2db66573965a1a863d1ea8c4e6ad3ac4ac
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eclipse-temurin@sha256:981e0d75b0c547829a96c981b991e7446a77f8c8b48246bfcf7faf5dda692eb5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eclipse-temurin@sha256:1e659ca23442f424d0622fe5f1cb57409c1e8c69e20e0dae6e180994310eb98a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eclipse-temurin@sha256:101f0fe114048b7fcbea47e1f94fc63f4f8659c5638f676465e6a9a8faccd737
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eclipse-temurin@sha256:39d1bbb4fcdb258cb8fd22f60d6fc819c2ce9dce3ce205184000357287cdbdfb
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eclipse-temurin@sha256:980db269a52822b927c7bff99c88006e4d88843ee3dc2e784adf68f762317b75
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eclipse-temurin@sha256:026e5eb47a201a6e764061fa9d7bc069b75f1739234d0105a2f62d6c519d09c3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eclipse-temurin@sha256:da63acd738bc4cf30557be80081bc7271f65470d8da4c4534220dccdd7cebce7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eclipse-temurin@sha256:aa2468e625cbf36cb8d28c57c498a5358c81e77ae7f624acf04b73decf966afa
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eclipse-temurin@sha256:3c44ed8e40779f932431fce5cbb9b26f6cd38dfc8bf609dcecd48dda161e5263
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eclipse-temurin@sha256:dbc74b18055db224fb6a0f07218ece53a23f4db634af77545e51d6ac9bc30c8e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eclipse-temurin@sha256:6e01900ad8a90fabfd1c1e5f1830f09b25a510dbecae76681cd0cfbfacc4bac8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eclipse-temurin@sha256:699b6eb1fc9163ece998f0ffda2b0719b6911978a54e12ec552defefee18048d