dhi.io/eclipse-temurin
Eclipse Temurin 26.x JDK (dev)
26-jdk-debian-dev, 26-jdk-debian13-dev, 26-jdk-dev, 26.0-jdk-debian-dev, 26.0-jdk-debian13-dev, 26.0-jdk-dev, 26.0.2.1-jdk-debian-dev, 26.0.2.1-jdk-debian13-dev, 26.0.2.1-jdk-dev
sha256:5dd4f3c5d3c0e11b7b123d2eec6b009fff323bd47e66de5eaffeae042b6ee696
Manifest digest:sha256:a56fe43c846610f77ae1a25c67529c9066c3433642eef961113a7caa61ad9222
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/eclipse-temurin:26-jdk-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/eclipse-temurin:26-jdk-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/eclipse-temurin@sha256:5f764370b47fe17fc772e59eea932c351b6d6444485114cce32a002af654acea |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/eclipse-temurin@sha256:0e9f39e1a0b78d9deeeedf2b31e37b19fe63b9e5a05b34efa9f7fd8ab8ed7cb5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/eclipse-temurin@sha256:64b523a875184b9f0787cc9825886641511fe3c341b5233bee2a60b9f1860203 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/eclipse-temurin@sha256:d69b747fd6eaab12e50c0964a9aec3c64e44fd98d13dc126bea33b7fe30b82c7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/eclipse-temurin@sha256:49d6f8660101bf678ea56a53c373636344a797070015379232f959148a5297cf |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/eclipse-temurin@sha256:dc349030dea257191353ab322e99ded3dbaf777186bcfcd89205204fd2a0bbd5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/eclipse-temurin@sha256:f1bc10464b5bec97732745b211fedb7515dbd286e09ecdbd1b30c7d3e1752d0a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/eclipse-temurin@sha256:67da0c17fdc5ecc11e7947f50a0afae7093fcda7d8faacd205ebadc521748832 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/eclipse-temurin@sha256:877803b5bebbcab0c12bab102de91b7a7368a99b14c6c55959b6a458a71bbedb |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/eclipse-temurin@sha256:01c25ae9a9d86629e7950a3175141a7ce8605c4db3fed62596bebdca7455c845 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/eclipse-temurin@sha256:fe040812381ea8806307219a063d9bf943142a0fa1a8d7c2de7df8ff62d29878 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/eclipse-temurin@sha256:bedb2d7983d9021b5a3aaf75b6bec1f69999e4e2320496196e4c989458c0d6d4 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/eclipse-temurin@sha256:68e4e2cf972ca85469e6975f96c2b184f279a35a590dc60fa41b4634b917786e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/eclipse-temurin@sha256:f2d55fafa2173c338866fee4fc36b09ef4d7e54c067c75ec1f040f36cdd635bd |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/eclipse-temurin@sha256:5b4d93c647b99bc4590db33e300125a2f039ea0d76c06016f2df05cebbbefbd6 |