Sign inSign up
Eclipse Temurin

dhi.io/eclipse-temurin

Eclipse Temurin 8.x JRE (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

8-debian-fips, 8-debian13-fips, 8-fips, 8u504-debian-fips, 8u504-debian13-fips, 8u504-fips, 8u504.b01-debian-fips, 8u504.b01-debian13-fips, 8u504.b01-fips

Index digest:

sha256:9d52a9e9d8f435dfe72095cbacfc180a71221dd916be8288ba10f228f639ab2f

Manifest digest:

sha256:fe440f51342b14455f18e5f0bd0ad749deb62ce0ec3e147a2451293ae60c6379

Size

57.85 MB

Last pushed

7 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active until Dec 2030

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eclipse-temurin:8-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eclipse-temurin:8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eclipse-temurin@sha256:224d45cd19cec3b4b942505a4be7966fdacc91ea5a5f9cbd9abf097db2d89b2d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eclipse-temurin@sha256:9527869509db056fb4dd5d494c0f2805690834894ac974609997d9cd8e29817b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eclipse-temurin@sha256:f34e951d9f008bdeb6484f367812c7349aa5f0bd1ba1fd996225514e22a1145a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eclipse-temurin@sha256:f87a4987033277714ce22c8d31e13510ef2fa169c18ec5989e7afb5dbc1d0db9
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eclipse-temurin@sha256:346cb1302c6a54050f9827edc58a9638ee772e48c550f11e80ce4edaba814721
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eclipse-temurin@sha256:dc319445806a680f7a9635c754b50405ff8c9848eac7f7dd1873313c9b7045b5
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eclipse-temurin@sha256:b4c7565428729bb6b9f7d5cfbd0bd6b0cff3df72d4cad386fddcfaa42346b0c7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eclipse-temurin@sha256:9a2a5c4e6cd4fc226b6dd3b36c30308cb78a37883b6aab5e611382bcf4dc8013
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eclipse-temurin@sha256:02395b5eed8080fbeac7e40d155fb0afc76d90c35c863e23ca91933f383871b9
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eclipse-temurin@sha256:f9608dfc7f4f8c921dc0604a2588ae93eb26aae69eca634b1f7cb06c2e2a3645
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eclipse-temurin@sha256:399cb2c52e769f1fe48e50ba7aa1445b27d1464ed6ad6d9985815363a916eb30
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eclipse-temurin@sha256:fc49381d3e5087dabe467a4a9c411bd2b2386bf4491e39dc0b4583a4d2781d39
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eclipse-temurin@sha256:41e474a04f10545692ac20d326574eccef419a37fe10b2ae04ab6b86ab05fb25
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eclipse-temurin@sha256:ea3a9f829f5512a3231aef1d183eee24260a35d925fd7b91d951ec0f6455d515
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eclipse-temurin@sha256:6f0773f96e0505acf0ca8ea3564f599c2451dc5ed8e8d803b553c4ce9952ea6d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eclipse-temurin@sha256:4dd1d641eedf46b2432e1105861a8ca57593541f36dd2102e51b110a23985c6a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eclipse-temurin@sha256:923bbe122764c3d4705c8920565b8dd78513836c5f73a60439898aa482657474