Sign inSign up
SapMachine

dhi.io/sapmachine

SapMachine 25.x JDK (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

25-jdk-debian-fips-dev, 25-jdk-debian13-fips-dev, 25-jdk-fips-dev, 25.0-jdk-debian-fips-dev, 25.0-jdk-debian13-fips-dev, 25.0-jdk-fips-dev, 25.0.5-jdk-debian-fips-dev, 25.0.5-jdk-debian13-fips-dev, 25.0.5-jdk-fips-dev

Index digest:

sha256:cc667bec22f3e6dca37b8ab4922fb1609d0a34420d17b0dfa58318a38d626cff

Manifest digest:

sha256:859e3e025e848af9783ffc7d4cc9611a56da3cbd24484470a3d5b516c7e7a1c5

Size

94.98 MB

Last pushed

16 hours ago

Vulnerabilities

0
0
0
8
0

Support

Active until Sep 2030

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/sapmachine:25-jdk-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/sapmachine:25-jdk-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/sapmachine@sha256:97f2fc28c04217949b3b39401186ed95bf908652d08d5e15670d23b099bcd75b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/sapmachine@sha256:20079a2963acd2f402ceb8c165d73780c4ceabdd6b71362ed08329e5f9ab1e9d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/sapmachine@sha256:7b09bff553eb4629b43e245e34cdbeee92a549f20fe745eb46bfba959930179e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/sapmachine@sha256:e733a6c0c1a4baf768ef35c9fa1d5c1ada938a7f521b9b8490995ad750dbeeff
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/sapmachine@sha256:09ac295162318e0a7c8a8572aa51ce2e19bcc957fb4deb3646fc84b189625c1c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/sapmachine@sha256:4ce752006d7dd896c94ee2902ae0c0017bdefc053b8fdc376114bb45e5c1b456
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/sapmachine@sha256:971c33a4569370f2b37352bda10969151b66ce4c687f4d075b26ddfdebaf28a7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/sapmachine@sha256:6262cb6c3df51ffc067e3e61aa24edfade64a15458b641369c7035e8f9675857
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/sapmachine@sha256:37f964dfc9b584f4ae447415ad5b137c5565c515c71c73150dccdd354ab75b19
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/sapmachine@sha256:6300c4708dc94f4c4659f03c2f2f87c8c44d41c921a31c143ce270c1a7a1fd12
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/sapmachine@sha256:8672caabc253dae22583abefb74bb536dc923c394bd0a5f73a5b32d5413ec135
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/sapmachine@sha256:c7f908f4f79c59ce432ec91da07d97d4bec0c3ba201be012cbeec9fd799d2768
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/sapmachine@sha256:6f0197842e2cb3e1b26f4f8f0236d7645dfdc360152137a3e22f0607f62400c3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/sapmachine@sha256:45780c6a6456aeddda964b50d7cb16ced8b0b214768e06a09ca9c02f207c220d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/sapmachine@sha256:21440754e09cc9b93f8416fc7acfe1f5f0946416715128dc19383d12a9dc9636
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/sapmachine@sha256:798dc2f376d14aeb27f7d1437063fa5ef0d5fdd814e3a1b187f56825e227822e
SPDX SBOMhttps://spdx.dev/Documentdhi.io/sapmachine@sha256:0969f66b10fcefb8d622e643fe96ed5d6e9ac74d8ceb23980d78dc6eb3641947