Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.14-debian-fips, 2.14-debian13-fips, 2.14-fips, 2.14.5-debian-fips, 2.14.5-debian13-fips, 2.14.5-fips

Index digest:

sha256:b590eed5fb859674be2dcebb5db92ab869b6924926b0549c7326ac604e8498e4

Manifest digest:

sha256:88c5725fb8ed825751151abf8e1356fd7eff8a9d4609c4ffc618e2482f1699ce

Size

21.02 MB

Last pushed

5 hours ago

Vulnerabilities

0
1
0
0
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2.14-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2.14-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:ca210f10718bade328018e8491c32bd5114544855b3c701fddcdab7e9e3a42f5
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:3be6e4a1486475634f40876e7e6936621299166a6e0676b311d5acdbe2977b12
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:c36a76ba9df2814209792dd7f0e0161be244d4464324327e24f9890e762ee940
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:4682c110112bea9d9f8f8db9913cd3b74189faf1814bf9fa5708f6073a56f30d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:c19f8f80b2e076d36458a6c7a98b4a2766694d7b6ebe4f78253553b6aade8094
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:4a3c56b160217281958a2c0a23017986b3abaab5005fd22ff5327b7d649d44c2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:f7a8ef96fd333037c8a3d985c267b8ece03c01ec0105fc1814e8a9fea50a709f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:1d7afdc4a3a7c0f318daf01e2651c739d7ef9ca568760c50ba02296df09444ca
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:de3ec151aefa9143dbb9bb4250ecfbe6eb2707d97a74af1caef80519cb113616
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:c2b477207f3d53c13055daa1aa3dd41e95940851ecfc9d1c285dcedcb521d4c8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:7d9c912d8ce92ca7ae6399e281269f3f4abddb2ae869f3fd85d00cf183c17c48
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:ceced487f630dc4a18b23e5912e9c4fa9789c367283ad59c4540e09e6d4b8153
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:8ca5d03ef9218f9023e18f711330a422e8489aba42fed838f65e04b807db17bd
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:303f4ea6bba669f839a71287b4c41047edd95745e948e4c09bac64d90475078d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:894999894107f578f785fa55c5ead800779e7ebbcfbf0fe448081cf7c62c476a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:a8db7dfb6cb180aa9a623ea4b23cb0d2b628e8046f4eb1e7c4e49d8b076cb59d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:b93953dc4e1ab45bb8cf0e731de429936027d34c1bc0210b64b78b79da168191