dhi.io/harbor-jobservice
2.14-debian-fips-dev, 2.14-debian13-fips-dev, 2.14-fips-dev, 2.14.5-debian-fips-dev, 2.14.5-debian13-fips-dev, 2.14.5-fips-dev
sha256:32dff9dc842f461c946785dcdc92f9c5c63065c650a77be750ca589053c4d1a3
Manifest digest:sha256:66bd3574b4cd2e90c4268b688113c060afc24fcfe5b3927b57d2f8a0f7ef1e22
Size
47.53 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-jobservice:2.14-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-jobservice:2.14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-jobservice@sha256:f0c57ebbde0857e04e777209c3fec5c460c6be273c399bf9457f3b4becd24b30 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-jobservice@sha256:6c73bb4114fb7e5ee747f165c96da0f50da15ca3ce3a9a8737d89965ec4880b8 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-jobservice@sha256:3ecebbbdffc0b946f521f71eb953c2a413da9660acf284ae8e3a0df08a195d60 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-jobservice@sha256:3a60fa1bdbfcc04fd0638dead7c153ef95de009df3f8be1b8dd982096f8cf81e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-jobservice@sha256:61620bc89ff6a7cafbedf1f36925b5ce03deb9e3cb5b887bd5965779699955c3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-jobservice@sha256:aebf0c61c26112ffab9585118b6f2ea95868159a2cadb310d0f9d1bffba1cf92 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-jobservice@sha256:1ea78eb73b9965d49189cd131ac0794b6ce7423f5bc53831ed3e15b28a9cf704 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-jobservice@sha256:5ddaf9896ba2b097c83d5e6e0240f704d4f1be84600f8777d8063f8e8e3d8685 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-jobservice@sha256:9440539ecb3a9aeea17a4addf42503e2ae4c1e4716944a89abc25939f02ceff9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-jobservice@sha256:73722f6bef7d03c2862405b3eee851e9b677c64937101de145da976142c4adb2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-jobservice@sha256:0c8ae3729e9a4695f119e310d88dcb8f30591fb914dce74469fbe43e1c20c93a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-jobservice@sha256:3f0d09b6b1516e5201075674e9b571a1f3f041ec5c5492c300378ecebcc3862b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-jobservice@sha256:071e9160d1cc8acdb342db6ced367c9b5caa803fac66d8d5b0d7e78da88c1d5f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-jobservice@sha256:3c157d38f17b29b271609368fe76752398c8de61f2f5fa334cdcf1e9105f9da7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-jobservice@sha256:ee2d09d674710a33fe16061bd91db5bf53c52afbb64aec9de14e5d3c63ded9a7 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-jobservice@sha256:1680f43eba0850ebff305ab1dcc0a54d7978a0cb39b261211a689461ea75c3c5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-jobservice@sha256:77d373f48e79b76143955653e4221c9a4f18dfbe8d5d48e48ddcc40d6ab735cf |