Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.5-debian-php8.5-fpm-fips, 34.0.5-debian13-php8.5-fpm-fips, 34.0.5-php8.5-fpm-fips

Index digest:

sha256:47672cc8358e6e1202b08632bf8f927738cd4353ff280b2cdeb959b163f092d8

Manifest digest:

sha256:d45d1e6076e3a2f042856b9c0fb4303811588d415856424a3efd7c17c870cc08

Size

274.05 MB

Last pushed

5 hours ago

Vulnerabilities

0
3
1
16
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:d2e003110df5c13ac2ec08760add090e22be7eb6da49e63aa466a6ab829f10dc
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:549e4576eea55048c24262f35d24f7a8737765f6e1d8a96812abcf5c261d0ba7
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nextcloud@sha256:874c869b5f29b7fdeba262538d851ceed69336b30793177aa4c6e4e5a7dc2b44
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:01da9b3b26fb51eeea79441f6dd630bf11c4702f0193f233ebdfc1ff7e874e4e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nextcloud@sha256:594aa504b86e8292d7e006349f440b1eaacaf44f8068060480407b56378a38cf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:91572994891658f22727374683e1bf4ce37bc5dab8ac9503766ebffdfdc20919
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:c2b4a4d176102f4f4bbb8214f746041614975c7a032b494f6f987146297bb60e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:a68cd41e5f088ad6f5cf8118a20837372f64d6a233969e814600fe7da47c7ab7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:c49609cbfdb47d47cbae475479a40df4690b66d1c598b0291edfce2d0fabca19
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:386f6b9c0b998a40cb5a0d033e10764684e1b734d22262ba5c1c029388feff0a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:ab0d2aba550196c8fc8e7fb8d2c0608ee34c9ad2251e6bcc6ac57245488c12f1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:b7c8a0acd434bbe33ba1cda12205a653eb5271472f09a4b7e99e071f1302f6c4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:9e2ec1439466a2f474dfcf099869a12bed5308d3c30c25e178fd5085ba7664da
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:4ed3121dd24e488f66acad17c1880d6b79e13d481c9cfe7842b7cf65ed25161a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:f2c4a9f8367408cb248312af58ac15d4ef52f6d40df72b22aa4896f22c14bc1a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:f05d6e8e841beac73ec910d510c15a788a80f5c32b6ab369c6d68aa5b2f4b161
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:b58bb69a295a7cff77c3f6bd655eeee349a1ff904eb7307dc15931d7fce40c91