Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, fips)

CIS
FIPS
STIG
linux/arm64
debian 13
Tags:

34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.5-debian-php8.5-fpm-fips, 34.0.5-debian13-php8.5-fpm-fips, 34.0.5-php8.5-fpm-fips

Index digest:

sha256:c613944279f614b308dfcd4fdad65347f0bd8fb5fe80814ddbbd3ec062b6920c

Manifest digest:

sha256:02da498a68737c55eb6c17f67bc67cbf2771c23227c674a3765f5f66b2f2cb36

Size

272.29 MB

Last pushed

14 hours ago

Vulnerabilities

0
6
6
2
6

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:f76b80e21218f2c22950dd8e6410286f27ec2a65d427feae006f1c5800e0f951
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:ded44b8780b54cb4e1d02768e709d331d41bc6a6ca026a7ca2a4f49232bb41a5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nextcloud@sha256:c3eb9de22d5d75bb66e9d9e9e6435ae9082bff07e0174d33815ac3763dcd6615
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:510afc5712b878f30878185b57cdeb3833d4f011805fc47e7d5b0b08a4eeb472
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nextcloud@sha256:aef399ac39e88c48cc6bb741d9e111f9d77198a04636ddc9a88deabf47fd52e3
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:369a25305f26839b3116d0c4dd72a8b4a12c85aca3775da1b23c076481ebc459
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:bb851c8bf2b60aa4fd46827388fa5ebad07a7138795980ae18ccee834cb5c9f6
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:f88512b2e706aa97546333476e8711ce7304758331c74374157b4f6b3b5ff494
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:93fc9fe44656b8ed233702562aa692e8d5d0e6628253a71ac11b61a72e8ba901
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:2602a438e6c4059985e4359bf705fef0ba3f3afd69fd4a7cc358646d421bb8ec
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:056541d10703209875d61331e09dd4fa27e6aa484d194e9bd9fd19a9b4bc1232
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:9ec81eb21ae0a7774a66b8919c74576c46f7fcd4b392fcb5fe76e26755626165
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:de7d5be8127ee3737fb1c55513f0f1fba32ff7a72cc9bc9c6c8411de4c094a12
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:7debea4668aa73372037f5b091e066b38ab59a26fd31a5d1353caeca0bb0379c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:5416825617dcb8fa741921c0493569a16914b313623a50bd1ccaac5267a58c90
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:d6668762cd05a6f3e1dd994c37ab306d75a1fe60ac7b81607b8d071b6bfd3166
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:0274058648978ad81ee8fa4f3a7f698e56e3c46c4dca1a12d998d32036662593