Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.14-debian-fips, 2.14-debian13-fips, 2.14-fips, 2.14.5-debian-fips, 2.14.5-debian13-fips, 2.14.5-fips

Index digest:

sha256:d26040679971c2d2486a1080c220e3ac77fde1cd4b4829b110b34cee343d0a14

Manifest digest:

sha256:e5e6110c893cbd137cdb46cc46dc2336621b4f0bb9163ef799305527748007e8

Size

21.02 MB

Last pushed

3 hours ago

Vulnerabilities

0
1
0
0
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2.14-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2.14-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:c77de1783c4e0a9ba8c32a465b83dff8f60819993ee052d0be939e36ac6dc079
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:7e29c9723778d34c0d0d7cc57e3e696a407046147b70254f91e2da3621dcc27a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:12a099ff68ecdab97a882f767f96c0c962bd73087821d41b961b4cddc25deecf
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:40248294d5b90761752d4e78d972fb77cd8e6b98b7b1f3ac7a409fd11a3e4b31
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:1fcef79ff47a1199a5cce73e4a3e635080382ae1f1d8bd9460cfc32c2cb7dd28
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:a2acfe8be06ae40bcc70f1375dac3fa82201bf2b8274db4927dc592d44e3a719
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:9188891c17d18fe82ed7dd5729fa2142e4d18de3fa2f8c882d665826763ec37c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:54e73fe22006ded673eccb7637998ed1ab89da95fc9c0e0d64d3552ad057c787
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:670353b42fbac042300637d7430c7531dabf7cf01cdd85b131a88cc9bd700aaf
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:7f270eef82d93e66e40cc83df5467c3080c6bf75242cc09407ae3ea69b93555e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:a128a7aabd6cecda5ccdbb3b8d5aac241e745acc19d450acc789aa406eaa97d0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:d26f5957121b5125e96fa10c9714d8d513105da19348721579ce5441cf42cce9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:533551fc893a31c0d8c815933b7f3b6e81c36c1fb5854cad3f5f7f2b4d27e926
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:a929b2f9473c589c452ced680fec430a3a9c3318252056993c31289bda06448a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:6736710c3e28bef3b81b6ee96794a83079f8e3f03db366844694a49b588634a7
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:4cae25b6cab8d3e49f1ad274b45da3ae462d1e72f8c7c8ad6133e82eaf50b620
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:f67bfd7ce0ff52a25ed8c824d90109dc56a48d7b3fe8594079497b4d8d0c3fa4