Sign inSign up
SapMachine

dhi.io/sapmachine

SapMachine 25.x JDK (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

25-jdk-debian-fips-dev, 25-jdk-debian13-fips-dev, 25-jdk-fips-dev, 25.0-jdk-debian-fips-dev, 25.0-jdk-debian13-fips-dev, 25.0-jdk-fips-dev, 25.0.5-jdk-debian-fips-dev, 25.0.5-jdk-debian13-fips-dev, 25.0.5-jdk-fips-dev

Index digest:

sha256:db04c752097c85af680b28d879c1255825b232611a5c58168292eb673f4ab954

Manifest digest:

sha256:6029e467fb362298c4d727aeb387f65cbe3903abe80dbfc8ee36eb9f8753a9d0

Size

94.98 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
7
5

Support

Active until Sep 2030

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/sapmachine:25-jdk-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/sapmachine:25-jdk-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/sapmachine@sha256:6b7df845fa1c96cac36c457400df7f1a15f7b65c1715e3110efe86dbdf4a6735
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/sapmachine@sha256:6d11b7f1ad058af84dfbe79ece57b8f1c20ad182c0987ec6bfb9a8108a0c0109
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/sapmachine@sha256:8ec2d5b50dcc4c78670a74ed2824aff516ffa3f6275f2518a4034fd443478aa8
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/sapmachine@sha256:439c45967a997034165bbc7274b3645b3655c94350dca33738f71b5f5711d45f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/sapmachine@sha256:e5d81a9b4ee4b8dc07c05b07b4cfc50fe31556147019d153598675b6c87d3f8d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/sapmachine@sha256:3e134a3985a221bcbcbe04d2c751c80532681f2c3d20ca17519c17f72763d540
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/sapmachine@sha256:1c748c212062f7614c590f99e4ca962e089a95334820f3d8ced869e6bc15b331
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/sapmachine@sha256:c2d5865871e0cf43300d8d86499fc0d31fac22f5bf4d516e2a63c1a5346b3376
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/sapmachine@sha256:f047c37ce0aa68b74ae6fba0a88368193b7ddb4d929bffccf94402680c0e9943
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/sapmachine@sha256:81ce2b768ed5dbea789b0b0015b1c126805e65f5807d5e813563c1d4d4217581
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/sapmachine@sha256:199999df1df0716a1a9d49e5655945956e199cf75e597d0e38ced25b2d6727bf
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/sapmachine@sha256:e1e3fca62a4e81255cedfa71418bf15419a9d4dd261eb21d99c188b4b906ce19
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/sapmachine@sha256:2272c7a1135a092f48fcd537510ef4f1a6aabb614c3e08e9ef5261a341f1af83
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/sapmachine@sha256:917f1e20abcb07d0fcff38ea6af8043ac024b7dbf4ec47bfa8ba985d38fc09d6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/sapmachine@sha256:7bfc94fe0162f59c502a06987bb12d069dee6a34285eb8cafcf693f463cd45cb
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/sapmachine@sha256:7f0ef5ee016c3266eefccfee6c4fe791dd98ca3602fa4c9bbf68e646bc3ad449
SPDX SBOMhttps://spdx.dev/Documentdhi.io/sapmachine@sha256:f1b82c6098a72d0009939770e7af0f90d1d871340ac1667ad74fe117fbde71d4