Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.5-debian-php8.5-fpm-fips, 34.0.5-debian13-php8.5-fpm-fips, 34.0.5-php8.5-fpm-fips

Index digest:

sha256:b367b699393aba99c404a959f3a3f5dda5f7155546dcacf2334f41ad3efd7986

Manifest digest:

sha256:df3ecd0d6f1611762b8e586aa1a1f807d04d2c06e9e79fe03964ffda6f703b97

Size

274.03 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:cae761c196c1706244ef9b7f8edf43836c2ea4b24cedf912edfc85d57e2ba7ff
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:e6cb5b4afeba71db7ca1349e889ca0cac620dea07725487f28edf4c8397448f0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nextcloud@sha256:074ad6d1059bef43413ee1529cc1c48253f85980662fd8c9478e330a487480c4
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:ec22980906625fa8c36749c5fb8bacba537d3d35f95c79717af4708f488a8074
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nextcloud@sha256:10e82b982215431ce3018193eabed9290a5676022695a58c0e92b7412b1549ec
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:856cdd86466a9fb4bac954caa3dae8dab20537e8938bd317dd6a26987073f5a4
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:d27cf55cef59fb8f6310ed5ef979ae8b22537f02b2270bc3637aaa3e6737431e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:9e8da3d11cfa3dd7297c2548582022c8440f65aec59263560689a6e66da2df9a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:ac4dc56c90ffa303415cf3261d3a70b4afd616e6a8d25df9477216718c9fae8d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:aea71d5444f52bdf317bd8d178c08f99b28e8b5c00e79369567aa325ce0a1211
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:2adbf3f742ac09e9e4179ee04f6c365f651ef2ac3f854011235212ab77223720
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:e265ae9ca90b1fc685b904d668833a2eaa16fc6e94d92ef4f4b9d451bb7d8aac
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:aac4ecac7abbaf3a52d956391eb39eeb04af6a83f43edf306fae6d936fda7c5e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:8be458fb521c77927c2710520ddb6faf34271542c25d2cce272185e4a4aaa83f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:ce2a28069cb516f8538195e2402973adc4adf6dad177bf5d6e343e968f8b99e2
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:310abae2acee32a00a3c90be455237cb8fabe7c3db1773449302733699031944
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:cbd353db815e4668fa267509e30dc61797bfa77efc62c5dcaeb6c04993517fd2