Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.13-debian-fips, 2.13-debian13-fips, 2.13-fips, 2.13.6-debian-fips, 2.13.6-debian13-fips, 2.13.6-fips

Index digest:

sha256:99e2d8972c7f0b8e39965d2ef95760882bcc8f7aaddf03665ba5536d7d2d066a

Manifest digest:

sha256:cca476ac331a8f60218b0bff6d29c79d6dd201a9c3eb9de322ebc8ef9937fb6f

Size

20.97 MB

Last pushed

10 hours ago

Vulnerabilities

0
1
0
0
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2.13-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2.13-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:e2f14a8a17b78ecfeaf411276eb069d40ac0ddcd418bdea3627c53b7985bc12d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:902301021dfaa4f6569465920f8db3370f662c2c3949e4077f3d2c52543b0f7f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:7915fcccacf331f98b0cd05af87cff96bf5fb1c7b0a28f0a86a011af2e87398b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:617773bd535e3c47b4d0a4ce27b8487e06ed8c962674621fbed3cfb86a00a12d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:6850a46a22f8217996781dc7c6a80d7d87b772b2d47c677f4b1b9e55a0c4195d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:4b97d6126b60e18eba4208ad6e3c6994067a6c651a8efe63114ab6eeb3596e33
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:9ae8c43fc750204243034362ce3047975b7867e35eb2efbfc914e9f3129beae0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:c475cca24d1fa662c8bacae480ed8593ed488a4f826bfca3cbdcbbc5e792996d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:243f5765a89c661e3e4851a19c37a36ff51ea45c3521d328fa8ce5948b5e0dc8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:07ee5c0f32cd98ae59c990346fdb5d5722657f4fd09e8e4e666aa331ea9891c3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:67b4fe53654ebb1c2464fa2bc2a6fe8eb61f65a4ace6cd9338eb3bce2b258c98
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:cb38506ca070386c5b8d16c71aa6f65d73878b8298862040ebbe99346b3a67a5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:fff21b1d89faa0474264d3836ef1c9f9ca6dc808a1172e7487ce425fc8f4ca11
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:62ee4f5d5f820cd70110b6df5b82cde9657663da3f2457377c6665eb6b1c1522
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:2fff12d256b58db4843ee49b1a2e6da22207c975706e152e21a66bdacc6a0821
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:b5d96a301661d69d1affba92b3da99e8073d13664ce5ada2fd10fe8d165ba5fd
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:117d521cb223a32aa40bece25a2c1e9e165a4cbf196cf3bb950a7c512959be7a