Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm)

CIS
linux/amd64
debian 13
Tags:

34-debian-php8.5-fpm, 34-debian13-php8.5-fpm, 34-php8.5-fpm, 34.0-debian-php8.5-fpm, 34.0-debian13-php8.5-fpm, 34.0-php8.5-fpm, 34.0.5-debian-php8.5-fpm, 34.0.5-debian13-php8.5-fpm, 34.0.5-php8.5-fpm

Index digest:

sha256:e8fd560ceb5716f8e5fa8b01bc6f987ccb3a68471f5f5b3936b0e2a9af17ac3e

Manifest digest:

sha256:5a5765feb0ce2d2300b769d17ac47837f920a294f0bdaf3733f050dd48d63a2d

Size

271.94 MB

Last pushed

1 hour ago

Vulnerabilities

0
1
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:4248ef5fa4aa9f79cf51d42b2fd51829e329ba6abfc6e8f85c39dea96f00bca3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:7dac296bc30feadb361b3fc41c70a9f1da3961615d47fe028ef1106f2fceabb6
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:dc060eab769278f550816a51ae94c765168c348f08484025d85b8c0e0aca41bf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:af6d6ce37756e01137ad669d6c51e8fc4456d1c374f05dedd750d382ecd3b72f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:79191f4069121691396888e01986aaf06912c2eaa803f900dc1db3727c052d42
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:6aa6e3f20ff887a3d3664bde3f9f6c7238fe462f080efdc352e302ef96669747
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:1c73f0520c79fa5de3390649942ea4cb942411d0a9e2718337cf7b8ef037a859
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:92c7834ef96b644d51a3eee73bc7000c2e7514d9e26f4487a7ad713a174fb3cd
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:dbd8e2e54372cf3d7973a80a0364ee4077a8b91c6f16dbea16f6f17883692f1a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:d05af212ae1c121a3fa747e03515f6b81bee20207eb5cf12e8476dc7ea16510c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:23c8f05581c6edc2085fe6c16fb5b626a34c080aa204aa3d9f2048ba03aba9d2
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:3b0b23be243cea47f882aaa6a66dbab6affb187e673434dadd0233afb9811948
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:7b7c02e8339facfd787ddbc696a8725cd8faf5a5a465e23e37a57a2b2fa06d62
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:772be3060f57bf4d76d6c6f4a48f93ce7841a69f5b61565d172ef0e88c4829bc
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:60ff6b75b4ba8fa12c9fc0829bd5fdcb116fb19a852f3715bb1ffb499a046bd2