dhi.io/harbor-jobservice
2.13-debian-fips-dev, 2.13-debian13-fips-dev, 2.13-fips-dev, 2.13.6-debian-fips-dev, 2.13.6-debian13-fips-dev, 2.13.6-fips-dev
sha256:a5eec5ab91c8b1f304a681f96f234f37aba80280d6e2140780bf423a9753a8bc
Manifest digest:sha256:a8f8a9f9de13e4ec35f4462a97008909d2a08dcb4874ec96387c791f6c6547d8
Size
47.43 MB
Last pushed
4 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-jobservice:2.13-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-jobservice:2.13-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-jobservice@sha256:318de9e4bf2bb4ae63ec24303dd301908e734703285f41e068b27306c9194243 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-jobservice@sha256:40597a532e0b4965f2616e3cd42c3aed379eaffdc3fe995f5d6b151036593414 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-jobservice@sha256:a2ebccce0079a4a0ce3aa32423e9da1a3a70d1e434d9770413b527f5b62c37c1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-jobservice@sha256:b0fe6214098bffa4cdd79158f3de73a7770d7abf27e1348aa949aade3ba4d6e2 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-jobservice@sha256:50da68f35521aeb890192754a407601700d605744178e1daae070c26891d26a7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-jobservice@sha256:5be029320da963ea4a95fa90098eee04271fbbf5cde57ef06ff5f698a31cb255 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-jobservice@sha256:123925d08071102db69c578a9a5b8ec5c0b9c91ebd73d03416d81bc0b99a91cd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-jobservice@sha256:8e595babaf54ab7bffeaeb179f38406afe50f44fd86808c1af819f1eae1f844c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-jobservice@sha256:d2b5511b426ff9393886533247515de0c06cbc9aaedb4da62fae65d04876e0eb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-jobservice@sha256:bc03f5186c79778af37a87cea5fae35ff7ff223ab02dd38095985ab393df2ea0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-jobservice@sha256:9debeb52bc13158451ee2dcc3efa872a79b193952ca69390d6376832f3d7b804 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-jobservice@sha256:d47fa23b815f3f8539226d161bc833937ecfa022bd6dfa7e020fcef9687d804f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-jobservice@sha256:cb44bb0a13f6ce893d9991e4c40cb4bbcde18f85d402732a5a3a72a4a45e46cd |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-jobservice@sha256:934c43db5c8972a17ad98c91c6e1e86b070dc2e1f6e04f6f8a34a3f9478050ce |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-jobservice@sha256:e911cfc20461486f18dda5b6d11c4458172ff775d090a06f8fb4aa1b91285d1e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-jobservice@sha256:f7f3d980c57c533a31ccecbcb6894b12673a9832f20b115e33668b07ae56206d |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-jobservice@sha256:12d6fd6810b75a556a76c0872a9c23fe3bb779e63489e81994f9097da8a27df3 |