Sign inSign up
Eclipse Temurin

dhi.io/eclipse-temurin

Eclipse Temurin 21.x JDK (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

21-jdk-debian-fips-dev, 21-jdk-debian13-fips-dev, 21-jdk-fips-dev, 21.0-jdk-debian-fips-dev, 21.0-jdk-debian13-fips-dev, 21.0-jdk-fips-dev, 21.0.13-jdk-debian-fips-dev, 21.0.13-jdk-debian13-fips-dev, 21.0.13-jdk-fips-dev, 21.0.13.9-jdk-debian-fips-dev, 21.0.13.9-jdk-debian13-fips-dev, 21.0.13.9-jdk-fips-dev

Index digest:

sha256:24bb36e586c355a123b3e4390f3ffe237ba2b21e054e508d06edfae5b8065568

Manifest digest:

sha256:8a9a91e5e2626cc5d24c93f576cf2ff552b8cb23a4cd1702ebb878ff2e4ebe8f

Size

170.96 MB

Last pushed

1 day ago

Vulnerabilities

0
6
7
26
0

Support

Active until Dec 2029

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eclipse-temurin:21-jdk-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eclipse-temurin:21-jdk-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eclipse-temurin@sha256:ba82fa4df9f4648d3e807ed1cb1a800f7dcbc909359104b6aa00e666053579c0
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eclipse-temurin@sha256:b5f53ece60fe6181b7d9a8a1458caf086c6e771ad63121b37ae0ace9b6473f22
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eclipse-temurin@sha256:3158b05f46dbc83e318519ee136d440240e88cbcc367b19b9d0c2d05fd277e73
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eclipse-temurin@sha256:8fc3e4c6606151a01925c2287c12da594de593344abf6a22f3375793140c884a
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eclipse-temurin@sha256:e855462ea926828a0109606e1b7053c2dee9c8aed1d8753a91b3866089495350
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eclipse-temurin@sha256:a7e1e3a524c1aaab87cb3aecd36d85a3e60a4cd3149dab28f1aa7375dc1dcd71
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eclipse-temurin@sha256:811c5f7e3af281d2eeefb1dbc8eb115207d354cfb4838458f37b747f4b886de7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eclipse-temurin@sha256:b5dd1b99a3a625128307dfe5684167128134c9bc1ebe912e27efd6664feb3700
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eclipse-temurin@sha256:7e857b16cbf99cb2ca636e93c391f51ea18f3679b1fc6a783de3d1fbf1c8b4b3
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eclipse-temurin@sha256:92d97b5c47c8e0110505f19e34c0e2620ba1fa898f81e56b1c68493485ccfe00
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eclipse-temurin@sha256:26f0d4a29de8f42b7487362355fe933c9418db6d7cd944daaffcb2230311f913
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eclipse-temurin@sha256:1709e9d2b27d09c0c20e31863166b92bdef4821ea9a587339b6037698fe2596a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eclipse-temurin@sha256:92eaf39861c4b3fd90b31188153e9856f5d042c8ebae57f14431a0d9baba17d7
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eclipse-temurin@sha256:ba6126d0a4aad97f3a6b3b75f6bc15f4a6ab2422ecd965ba3ee0f1c3806ae921
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eclipse-temurin@sha256:4b9c51f73e11e6395e66f3c6d243b69304decb4b891bfcb5ed3124e95d1f5542
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eclipse-temurin@sha256:48996348fd128f636cb1e19a4daf013226bb92e72cb1326e673652b28e6d74a9