dhi.io/nextcloud
34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.5-debian-php8.5-fpm-fips, 34.0.5-debian13-php8.5-fpm-fips, 34.0.5-php8.5-fpm-fips
sha256:b367b699393aba99c404a959f3a3f5dda5f7155546dcacf2334f41ad3efd7986
Manifest digest:sha256:df3ecd0d6f1611762b8e586aa1a1f807d04d2c06e9e79fe03964ffda6f703b97
Size
274.03 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/nextcloud@sha256:cae761c196c1706244ef9b7f8edf43836c2ea4b24cedf912edfc85d57e2ba7ff |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/nextcloud@sha256:e6cb5b4afeba71db7ca1349e889ca0cac620dea07725487f28edf4c8397448f0 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/nextcloud@sha256:074ad6d1059bef43413ee1529cc1c48253f85980662fd8c9478e330a487480c4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/nextcloud@sha256:ec22980906625fa8c36749c5fb8bacba537d3d35f95c79717af4708f488a8074 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/nextcloud@sha256:10e82b982215431ce3018193eabed9290a5676022695a58c0e92b7412b1549ec |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/nextcloud@sha256:856cdd86466a9fb4bac954caa3dae8dab20537e8938bd317dd6a26987073f5a4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/nextcloud@sha256:d27cf55cef59fb8f6310ed5ef979ae8b22537f02b2270bc3637aaa3e6737431e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/nextcloud@sha256:9e8da3d11cfa3dd7297c2548582022c8440f65aec59263560689a6e66da2df9a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/nextcloud@sha256:ac4dc56c90ffa303415cf3261d3a70b4afd616e6a8d25df9477216718c9fae8d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/nextcloud@sha256:aea71d5444f52bdf317bd8d178c08f99b28e8b5c00e79369567aa325ce0a1211 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/nextcloud@sha256:2adbf3f742ac09e9e4179ee04f6c365f651ef2ac3f854011235212ab77223720 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/nextcloud@sha256:e265ae9ca90b1fc685b904d668833a2eaa16fc6e94d92ef4f4b9d451bb7d8aac |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/nextcloud@sha256:aac4ecac7abbaf3a52d956391eb39eeb04af6a83f43edf306fae6d936fda7c5e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/nextcloud@sha256:8be458fb521c77927c2710520ddb6faf34271542c25d2cce272185e4a4aaa83f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/nextcloud@sha256:ce2a28069cb516f8538195e2402973adc4adf6dad177bf5d6e343e968f8b99e2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/nextcloud@sha256:310abae2acee32a00a3c90be455237cb8fabe7c3db1773449302733699031944 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/nextcloud@sha256:cbd353db815e4668fa267509e30dc61797bfa77efc62c5dcaeb6c04993517fd2 |