Sign inSign up
Harbor Exporter

dhi.io/harbor-exporter

Harbor Exporter 2.14.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.14-debian-fips-dev, 2.14-debian13-fips-dev, 2.14-fips-dev, 2.14.6-debian-fips-dev, 2.14.6-debian13-fips-dev, 2.14.6-fips-dev

Index digest:

sha256:791bdcb3b880cfc4dcf45bcd4083c40909969096f4f868cf4cf89d97306be7cb

Manifest digest:

sha256:bbffb9a42d739f86e8fd4bd3b1008993ce7970e66fc9d63ae756cce973323e98

Size

41.19 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-exporter:2.14-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-exporter:2.14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-exporter@sha256:b434b3167024996be2a2bd4ec345068553b2c98a9eb60dd0419e348959fe738a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-exporter@sha256:3bff4ae2ca6c3246dbf78ad7178e5cc7e0629838fb75881b530d558e28b0d5b2
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-exporter@sha256:7b5c7441b376cd2b1eefb3426f2d4661adf1c2e0ff6662fea25b7ff020e26c04
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-exporter@sha256:cc0cdd85d2cb94fd754682320fc179bcaebd2ac630fd3cb68f51cee65f530ef4
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-exporter@sha256:0ca885a8281381b9c9adc012301361fa24051580b613d106cf567589f92febe5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-exporter@sha256:205c5953a51550f3f3136c76f1e9fbe1e23562c3036b680cebed4d5a2a9a94a5
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-exporter@sha256:a96db151a0e062c748497a4aa27c3d1efaec0f2402684c327d297be7b96c950b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-exporter@sha256:dcff544fd7b2cf791fa0b319de3066fdb4b9d7455194a9c7072b6da469658cb3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-exporter@sha256:9e802febda45fcaae2aa46756c34e92f3bf55ccb16d4b8a83a83852959732f42
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-exporter@sha256:4ac4946f5b557017709e959a0e83d771b12ff87af292feaf9c9b60ee0444c632
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-exporter@sha256:fa83ab1e25871cb8b5431c75c53611f40db62b9ecd0c92a95ad4619ca2016c46
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-exporter@sha256:6f584559d95646601214e07781d4b1447b0bd0fe32cae5f34abd1c18ff73bd5a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-exporter@sha256:6cc8eda6d7ac6ce6d8994d430e616951620f631533b1811af6cc10c1074b012a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-exporter@sha256:b475b78e68a2d48f0e3776f2a7d539083769cdc7d09be4845ac3cfadf61fd29a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-exporter@sha256:3eeb2ba5c9396c9095eb3c40095c37eaaf5a12f423b9223b720adcaba9e388a0
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-exporter@sha256:b0632561b1f057e181cdfa2670c0c8a97e2a124bf46a755c25dd19bc8593c748
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-exporter@sha256:761579596c3258862119ae8d053a3ca1cfc4a9d566605df8dc9d2cb91665f54c