Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.5-debian-php8.5-fpm-fips, 34.0.5-debian13-php8.5-fpm-fips, 34.0.5-php8.5-fpm-fips

Index digest:

sha256:529a62c6769cf861da856a4c7b99cc84e2370e27352d7e066eb1196d374175c7

Manifest digest:

sha256:ed410a1ebcb8dbcd6e8b6d99c72a78f0d122c6b9614a99b2178c7a8e9187d18b

Size

274.02 MB

Last pushed

19 hours ago

Vulnerabilities

0
8
13
76
4

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:7c7220d9e94e91d2cbd707771677658f742a1f8659efd0bad054f4fa042ac979
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:b64cde3743626f4847c3e326d3b0499eeb312c67204faac6b8e2b59d701cca8b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nextcloud@sha256:fa785a24a4563ac870fa8be24dd7ac0121aa64a2d9506ded50f583eae0cd1267
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:d856cf6278b1fddce6657b6a6bd038c018cc8d44fd00277b34f4e5065dcedda8
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nextcloud@sha256:d07dbe649821b2c48235119e8fad6f4ed0ce0b1825f5af0945768a1b22cb1e7f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:d18b9d6fa73f163b9d167d20c3d56b0f2e8845a6af4449259eb9ee6b6606c84a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:95cf3912d5b8a410be710cca908b00d1fdc7e5ee88c2296e9db82990bc53bce7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:b35f33347c4e2b0547f154a95b3192f8535a446c166d50cfecd485c49a4f892c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:7c29f3da7b5a5f1f837cbd1a7076e2ea6e819415c506f27a25bedaabee74f5fd
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:50dfcc6fd37385d1337396f25744257e90757917f1690fb823177a72971530b9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:f561ef5a4b4d74dcac8b4430048f4616c0a983094c239c617a61823a6387f899
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:7dcb451f802e9ea093b8400bc90ebcd7cf42e0f4cd76bc418d963de8288c99a8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:70339dcb50c6ff5a45f33c1a937e3dbe202ec31be692eef4dee46763eeeee694
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:8d92e13acac25790d8aee4ea57bab267fc7829425df3499a9f1e089c6454f41f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:fb391c33e0fa7188b9f7d8430d2736b07401e9f3c9683b847997b2cc5f7360bc
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:7447a58e266e1e989a899a31eb261a85093fa0e47b3d44f8e5c44c3f132810ac
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:69696d00ee111e783bea7366640a670a81404c85e77fce6390b53a962e25820d