dhi.io/harbor-jobservice
2.14-debian-fips-dev, 2.14-debian13-fips-dev, 2.14-fips-dev, 2.14.5-debian-fips-dev, 2.14.5-debian13-fips-dev, 2.14.5-fips-dev
sha256:8a8457b464a67f471a3fd6271e58140cafecbdefbb1016036a6929eebf5a5ad8
Manifest digest:sha256:8e667d51a3a4a00ada36e6e6fd4c2f27fed5c5e3d407979b0a9bb52994c948cd
Size
47.54 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-jobservice:2.14-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-jobservice:2.14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-jobservice@sha256:c89a43b7ad5b5523c17f766c138ae584b6c354881e80cd64eeacbcac8a5d48a3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-jobservice@sha256:b524da4e318ebc4086d938b84d5ecd13415ecfd22a551a566f9fdde7c685b1e2 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-jobservice@sha256:360b7935bb824e4fc4f4694fb3051f504fe5ca0162f86fbdfaca3494a511ab86 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-jobservice@sha256:e43b8677dd40f680a3155002d90c171e736b637b9aee0e84d1c5c52d550771c1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-jobservice@sha256:bc970258d7332d3a159bd314a24151618fbd7b00112c24ccce62b75a63f58044 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-jobservice@sha256:fb82d45af55ba1871f33de3e8b53953a89be4afa593966f557daf8b2dcef2523 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-jobservice@sha256:6fd4051826de476e36406ebeed34964fdd00dfa905918b0c4763a51ecd334911 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-jobservice@sha256:9743b4fdde4acdf140421d9b3e08dd15b7816882b54afaff1caf2054745c5822 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-jobservice@sha256:7b026acc388724ed3e2ae58e0b697186da99b939535eb25abea650bd5f91e0fc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-jobservice@sha256:9b80702377516a61a21c03bb2a74704e91c798723e0090c4ade0bebf8fd40760 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-jobservice@sha256:3c56045048fbc9ef2a671a6f1ab9a8e15af3f816df1db5ec5336a0dbce2c276d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-jobservice@sha256:274e94817d84a7a15e3b8834e018c4115d9383327f3ff0fe006b43ff17a4240e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-jobservice@sha256:4fb6dd6e03e35e858113e1a0be88e723ff45cc2cbdc9c1c390f5196a734b6bab |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-jobservice@sha256:97f147259bfe289de6abae1aed32f60cccaf0e4f3b69b9eb2a4f6e240928c9fb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-jobservice@sha256:aa4c7157a916bba40e7890c410ead01a6c592b0ddeb232f3cb4a21e823b97687 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-jobservice@sha256:353a51d4892f753fe859c8137f98655caf307c71911cf05aefa9016e9a927faf |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-jobservice@sha256:d8b01548f99b09cd2d8a1b79861fa6a39b6fe1c20d2ec748e2ba775ea27ecf1d |