dhi.io/clojure
1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev
sha256:11b4b5da8c847c42b204198656cfeed90fc63c65c9b94e67d900d4d3df6d07d0
Manifest digest:sha256:1fc332a630d7ac3a2b122a90bf4f9bf31bf19b9bbee28830a949dc7dc3c3ddfe
Size
196.98 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/clojure@sha256:ca1532a397d3939857bb6a5e8a465e91bb0a505298462b9fd699c21c481f8d9a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/clojure@sha256:e6a5a5f31dbd63bc2a45a1f9c1f200456752d67222bd6a3892448c881a9ba82b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/clojure@sha256:cd4542e32faa8e19aecd0fa0052204110423d3973fc22bc68fc652019aeadce8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/clojure@sha256:be96a182fc237956bf1f698ace4865d67a385b18a1361ea44930dcab746dcbe9 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/clojure@sha256:d4e0d037f6f11e0eb156aad4fe2312753025417d11588fbad2dfd4dbdece6ee7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/clojure@sha256:fe4641014c20fb769b1a164753bdab7b8a26c8bec8e2eead6142948c26dac9e1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/clojure@sha256:77bc9672a01fa9c8853fccf0b993e95bcd0503869087ae795c8e772d5b16b2c8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/clojure@sha256:f4c670f7c9aed3ec88490c24283764b7921dbda08569d696f0cf7901f07fb873 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/clojure@sha256:c16a068a1c977e72aab43c68bde6b9a31e614a2fc701100a29bca880bb7c85dc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/clojure@sha256:191359787a6cce9afb09830923de47b9a1e52fbcea610103432d9f61b85bb697 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/clojure@sha256:d3d967de2515143e4a3d299bff1606d3bf48e383701dd152aa630c2d4ba12908 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/clojure@sha256:c13c9a673f8ab05e599300db6332728dafc399a3c4cd50fd305c074f127452a5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/clojure@sha256:9b5499a1fd0e42ad286d662f8c43ebb95a2c483d7150ba58a5b6de8a1fac890d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/clojure@sha256:171994f73984079d07a10aef8af346185d0c978d39f3c946aa02f66af0492854 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/clojure@sha256:645594c6eaee44acffcdfdb92f15a41a7c837e801dd28d2a971443d2ea767dd5 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/clojure@sha256:d08a2b923053efaff659f8988fbfae86fc9d4d5b7d36efb61ac5c4cc240c341b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/clojure@sha256:e181ff0834b103e8ddf2c340593441bca55414120b934970f3f4938a5ed750dc |