Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.14-debian-fips-dev, 2.14-debian13-fips-dev, 2.14-fips-dev, 2.14.5-debian-fips-dev, 2.14.5-debian13-fips-dev, 2.14.5-fips-dev

Index digest:

sha256:8a8457b464a67f471a3fd6271e58140cafecbdefbb1016036a6929eebf5a5ad8

Manifest digest:

sha256:8e667d51a3a4a00ada36e6e6fd4c2f27fed5c5e3d407979b0a9bb52994c948cd

Size

47.54 MB

Last pushed

6 hours ago

Vulnerabilities

0
1
0
2
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2.14-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2.14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:c89a43b7ad5b5523c17f766c138ae584b6c354881e80cd64eeacbcac8a5d48a3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:b524da4e318ebc4086d938b84d5ecd13415ecfd22a551a566f9fdde7c685b1e2
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:360b7935bb824e4fc4f4694fb3051f504fe5ca0162f86fbdfaca3494a511ab86
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:e43b8677dd40f680a3155002d90c171e736b637b9aee0e84d1c5c52d550771c1
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:bc970258d7332d3a159bd314a24151618fbd7b00112c24ccce62b75a63f58044
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:fb82d45af55ba1871f33de3e8b53953a89be4afa593966f557daf8b2dcef2523
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:6fd4051826de476e36406ebeed34964fdd00dfa905918b0c4763a51ecd334911
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:9743b4fdde4acdf140421d9b3e08dd15b7816882b54afaff1caf2054745c5822
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:7b026acc388724ed3e2ae58e0b697186da99b939535eb25abea650bd5f91e0fc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:9b80702377516a61a21c03bb2a74704e91c798723e0090c4ade0bebf8fd40760
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:3c56045048fbc9ef2a671a6f1ab9a8e15af3f816df1db5ec5336a0dbce2c276d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:274e94817d84a7a15e3b8834e018c4115d9383327f3ff0fe006b43ff17a4240e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:4fb6dd6e03e35e858113e1a0be88e723ff45cc2cbdc9c1c390f5196a734b6bab
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:97f147259bfe289de6abae1aed32f60cccaf0e4f3b69b9eb2a4f6e240928c9fb
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:aa4c7157a916bba40e7890c410ead01a6c592b0ddeb232f3cb4a21e823b97687
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:353a51d4892f753fe859c8137f98655caf307c71911cf05aefa9016e9a927faf
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:d8b01548f99b09cd2d8a1b79861fa6a39b6fe1c20d2ec748e2ba775ea27ecf1d