Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.16-debian-fips-dev, 2.16-debian13-fips-dev, 2.16-fips-dev, 2.16.0-debian-fips-dev, 2.16.0-debian13-fips-dev, 2.16.0-fips-dev

Index digest:

sha256:2d4b5ce37418ad323991685318d27c3aae38c752562edd39db9c467754498314

Manifest digest:

sha256:d8707391cbe3fb9678f01b9f305e211abc9e177e59fb99c17da871b6bc354f02

Size

52.20 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
1
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:0cee46a33d4e91131f0f9ce9828e4e5bbd0aba6a661af906afd7282434badf07
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:365f915d769713ef6c4c3f753b2f375f0e2a60fda2822fcba985cce6578e19cd
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:df926d6b44394010a90431945f7013f6badbd5a688ce1858badb6408fa744358
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:1929a07600356655d12ce553c5d0490e1ab2d840fa483375c029f8881b0a256d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:bbaed93340a76af88549711f4fa6c6d83731c50f1afcc49f6e0af635e1539643
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:3ceb64f7b666d40c031f06abed3855aba0c2775fcd694fb667f128a088060d7f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:1240ffc6f204ac3b73772abfe6f7d4ec1608b9f49e7df2a8f32119dc77e6b4b2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:d9b9257e72ff8c2559ce0100110abb83e9bafe779e763a067e725664b2c29700
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:44e1059eee588f9e96e43c02b9d727d4ac6370778860fb5d568cb078173f3c65
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:5b0e20b0d412f064d57113b9b2ef17111d6911b4a68a0e80aeeaa56638f22f88
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:6de229c4c56d3de37e5f3657cb7409fca213e16e094c63455d24a9d68037420e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:d3258c5299cc4c7e920822b6477e21053a44dc228cbf837c4908c419c749c4d0
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:c84e5cb13c59df29ab46f14fbae4097f6d725ea5f48d0766ba388b61f5623570
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:2febf462fbfafa97bd4b214a413fbcadbc71165a6b487003ed718481bc7c0351
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:301f7c512a4e669589a3edbfd615043409709c5e49d9638baa035969eee7c83c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:06b84372cb7262c0df6bc677816ea5e3d190d755ce3342bf153f14b1a928c53d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:f9acaedd0390428ba1629ff4eec2a50058b763f0d5905aa8d6d4b312fd84e75c