Sign inSign up
Eclipse Temurin

dhi.io/eclipse-temurin

Eclipse Temurin 11.x JDK (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

11-jdk-debian-fips-dev, 11-jdk-debian13-fips-dev, 11-jdk-fips-dev, 11.0-jdk-debian-fips-dev, 11.0-jdk-debian13-fips-dev, 11.0-jdk-fips-dev, 11.0.32.1-jdk-debian-fips-dev, 11.0.32.1-jdk-debian13-fips-dev, 11.0.32.1-jdk-fips-dev

Index digest:

sha256:b12dbea3b271ebe93611c29edc9d71cc01c7ba473caeb52464d0b08dc8745811

Manifest digest:

sha256:2d8f490e054936504c3e2a08fec379f2d5d969220bbbab5e9c4e0961abddc6cb

Size

157.92 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eclipse-temurin:11-jdk-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eclipse-temurin:11-jdk-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eclipse-temurin@sha256:4f6b3838fd786a5cc1e7b5a1120805ed61b484eaa8c7800548a023179f43214d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eclipse-temurin@sha256:81094ba10d6b091ebd20e0fcd107cca4a31ee0cd59d74608791a7dd807b57389
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eclipse-temurin@sha256:7f25df3882685b6dc3982c68f8099f669e6b9fe99f6d42d8e4f49904d8a80149
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eclipse-temurin@sha256:0492dbed35a9dd206667331ed5043378b4416d6fca40134f8a888e86f92a3522
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eclipse-temurin@sha256:96fcd341fa33443458e59e42a7dfeda8ebc00e4ae4a91dbc15d97f75e981da53
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eclipse-temurin@sha256:f2dff0e3da119f1cb05ffd3da1b6a009db0993590e276b7c96dd7ff0e24ab369
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eclipse-temurin@sha256:76b8876cbe99301c1030ce9a73196e9a59fa62d754554d3bf80702d3f0184128
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eclipse-temurin@sha256:cfa07a0cff45df018d9a1d1c15e05c74d599782160045922f1c88b6cfa4c4276
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eclipse-temurin@sha256:a7c55b369cd859208e9eea411572a75bb87d66fe6ed349eb4f35a7d049036e44
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eclipse-temurin@sha256:5ed0a3c6070af741e7e017846bc144edcb5fdc167823c5e0cd2d35bea13f13ad
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eclipse-temurin@sha256:5742ee00b3788a97b1226ce49765d82c7b68618b8bf9a4616861469cff94afad
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eclipse-temurin@sha256:c826af64b422ce2e3a2ce016c2fcb7e92b2ce982c091f313e3779beebdff1824
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eclipse-temurin@sha256:e61146d3760b37990b37b2c727111b911107868029186b58a78f893883acd9a0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eclipse-temurin@sha256:363d17e8b38b1979165962ce85c22e1dd52ddb229af966673c5ca867171064f2
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eclipse-temurin@sha256:f04883c392cf64eea5366623cd86060e6edd0215afd173ca9b0957e6e233f0f4
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eclipse-temurin@sha256:386b9839cb7ab843790cd1e91f8cc9104d2469d56d20e3635744acabc2c9e797
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eclipse-temurin@sha256:fc1692d23ac7eb01f26790bc7357f5aecaabed7ae0109a3c0cb288e08cfce8bc