Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:6d27b36965570ba24412e283d11284d0f1d0c680cf10216133eacc5a21f4fa7d

Manifest digest:

sha256:ceff497ace10d528e720ac6f7331e30d894ff2b79a46e409bd880441c7b1f1d3

Size

196.97 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
1
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:7c16a2f57145d048d6486900beecfb260415ae97518dece6903083ad395b4e50
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:d42b6ee89728511bdf98f120b58b5f34221abe735023268086ab3b2b7062d1a6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:f4b511bf69c0ee62673e46df7b8f48fb486543c5e8f5eb456850783d88c0a618
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:26e0484fedc9118648ac816b0cc1e573f27a279c3b7499bec36a0ca3f43a5231
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:ef8bc055434bc327347a7c60538c57fa8400fbbf37c1313a461e0d8bc1e81baa
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:3dc606e788a1d0988258aaeae415e0b251bd1c3b2c55eeb37332db40a3d9e952
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:5d5b87a7d11ac3428e9d0cee8ad7833f3804ec6898e289a15b0cf0ffb0fda54e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:c173efe73d56843d1a5861c26e59e47e07146333c853c1072f9098189e93a07f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:e3d3922cf83ce561ee6c70210cd990c495a477a50a7ebf2395b0d9ccff6cf34c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:166ed90997359afce677c27026373dc236a16fb3bcd89200471a712134d56ac8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:b7978c56ef4a1fb16bd31c7cec013fbd16e680adbb42fafe0eaaf84941ed4cdb
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:290339553d587b72c941ac960a34e0068d0fc794fbfbe2978c7ac10321f09c3f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:9df8a7b5398989d9429d5e0dc8177a223f93f97e6300911406c0e8d88d7592c4
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:ebce11825487724a2ac51f9dcee52ac76a168dd009ea7fe2260d32967649e99b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:82f749fb9afcce61c85e50391d4d4fb396b0042c4ab145e768b4a6673b2dcf04
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:ef2a58e3f5c88ea81bc1a497ed163cb3ecdb5d0791c23e039986f90ca85dcf32
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:8f2aa7a477708427c554f72a6461b82d585540bc73992c733f1c4f962392fc10