Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.5-debian-php8.5-fpm-fips, 34.0.5-debian13-php8.5-fpm-fips, 34.0.5-php8.5-fpm-fips

Index digest:

sha256:dfdccf4f433dc3518a527d4763b84078a52ea95f014f3044cbefbc4c2135ed07

Manifest digest:

sha256:843987c9e2748175af2eef71ab4e89cf0d67ece9e4b2b5bdcbb6c2f6233e9448

Size

274.03 MB

Last pushed

8 hours ago

Vulnerabilities

0
0
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:b58c48a38e1a1652d4e017dc1fd6045860653578020ee3b3bde954a6f728a71a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:3c8b61618038b937ba2ddbbad2ef765844ac570b5e90263e8e9ca6b3304405e5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nextcloud@sha256:ff9a583c96110952ba8ba96e7ba0849f5c25f9ecdbade925e3346f0afca1de88
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:9c77d6f6846d190c6b9093ff2b78220b003a6dece1dff098e2fbb99b67a45701
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nextcloud@sha256:ef3dd65d3c5488a1fde0e718a53e4f11fa5da1bbd8ed8df1338c066aad00b36f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:828aae22fac423244d423f866de4ad13495f1eceb5865c539ffbffb6f28be8bc
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:e63db60b61196129b3622a1cf4f65d9fe38ccfe419bf348e939c2470973dba31
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:cfb430ee3c73aa077681f480f73ec4424bd5953a2c60223d53348a124c663319
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:ff8dae96bf93a1c49cb337279e8035be04e4f077191ebd78190ce907d51badfe
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:bad0fcb72ce09af2528e197e7317ba7b60a703b00d562b51475a38a208d48b6a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:6eaf623f29a7a2a6f5b7b76bc464980329a043cb1797d4cfc5f8e54c2a2b8a81
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:ab777eaa55eedbe6fd9f5a6b35ffce9ba819621ea44ad694cb2ad747f3d579bb
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:5d7946f6c3ebcb2f13c52bfaecbfdb49b8c20e87d7c99cff3a7d5948dd911d5d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:067f2e9089d2bbeaae046e519e079bf5366124ce94da94f9b66ebe96995e3bf5
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:b8767d1b1d9058a99563e101416df9850100e10a6c0958a31b19ca7ed30c4101
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:ebc5533f2440907f63b19f6bd44b5b641d5e47be0416f5d5d2af579665f3eb6b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:735a4ed86b084a52936d4fa8330dcc63b6a0a98ce5a33c51e019ba713e5558c6