Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.16-debian-fips-dev, 2.16-debian13-fips-dev, 2.16-fips-dev, 2.16.0-debian-fips-dev, 2.16.0-debian13-fips-dev, 2.16.0-fips-dev

Index digest:

sha256:2f386231a3e42ff0af6a83f6b23101b12d40d38d00efc3c1457222c7d2faf422

Manifest digest:

sha256:2e258573c35b836c5442d42d92233e228c277c15b9f44dcd5bf0704f05bad4b8

Size

52.20 MB

Last pushed

45 minutes ago

Vulnerabilities

0
0
1
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:1d44e2b15b5b0334165eb22b7e0a85cb7ba1423ea38bc3ae769b056dbb1da41a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:93be9b06ef7fadf12d4d9a8340bf4f03a2678a9427d7cbf63d192c737a0077f0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:e1afe81e188f2dd6e01b78930fd15d8ea283e420a604ea6f1b38b684471fc94b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:6bd26c1aa163e98c63da3b1ec0940516728778aef7237b13d54c9d05436ebb8b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:b9cbfc6009324c92affeec1e302ddfe78d93c36aee6152bdf73ca2dd9a5b76db
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:473b14a25b1e485f830991289305146f897ce5fd595056619d821d7a37aaa2cb
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:d1ea30a98f12797c8a30e49c6905cedc9a5540dd668567d74148281e64d0ddb8
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:8940610cd6952a7af2c3bdde741d374e9f24a22b053c79a1dd1e9087f1169122
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:4ebc7a14d299842ca7b70937d47ae78001a613a57a6f3a4a09989998d2ced665
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:6a0de485a0086c4e17302256ec41fa6fbad57796e9d66208abe305b05c4203dd
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:6b52a7b3127b3988f4c856b7ef0451521384ef2eccf8f91d09898cb834709677
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:431e2e22dcda0214969c146e2eba4a54ce6c318b34206c39d4de164abe01b614
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:74a2879ceb45f3c38ece7867c7bc8af94cc3ff9b13ebc0ba1e43a6193fd796a9
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:d6f1997eb006f67b7d90e7dafea6bd83925a5885ed85eb46d914ca10486e4f11
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:454e929ac1d6333dc8fb7f1ee060efd493e92a81229677e907dfaf6e41efde4b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:bf682ebc8f306f1cc88980637c8d259ef5931d29145ee66c3dc5f08e5cdb2b83
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:2810dd7afb6a81b56a3cfc7b3cc429f75b632cb50acd0dc394b13ed436ba4f49