dhi.io/harbor-jobservice
2.14-debian-fips, 2.14-debian13-fips, 2.14-fips, 2.14.5-debian-fips, 2.14.5-debian13-fips, 2.14.5-fips
sha256:d26040679971c2d2486a1080c220e3ac77fde1cd4b4829b110b34cee343d0a14
Manifest digest:sha256:e5e6110c893cbd137cdb46cc46dc2336621b4f0bb9163ef799305527748007e8
Size
21.02 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-jobservice:2.14-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-jobservice:2.14-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-jobservice@sha256:c77de1783c4e0a9ba8c32a465b83dff8f60819993ee052d0be939e36ac6dc079 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-jobservice@sha256:7e29c9723778d34c0d0d7cc57e3e696a407046147b70254f91e2da3621dcc27a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-jobservice@sha256:12a099ff68ecdab97a882f767f96c0c962bd73087821d41b961b4cddc25deecf |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-jobservice@sha256:40248294d5b90761752d4e78d972fb77cd8e6b98b7b1f3ac7a409fd11a3e4b31 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-jobservice@sha256:1fcef79ff47a1199a5cce73e4a3e635080382ae1f1d8bd9460cfc32c2cb7dd28 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-jobservice@sha256:a2acfe8be06ae40bcc70f1375dac3fa82201bf2b8274db4927dc592d44e3a719 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-jobservice@sha256:9188891c17d18fe82ed7dd5729fa2142e4d18de3fa2f8c882d665826763ec37c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-jobservice@sha256:54e73fe22006ded673eccb7637998ed1ab89da95fc9c0e0d64d3552ad057c787 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-jobservice@sha256:670353b42fbac042300637d7430c7531dabf7cf01cdd85b131a88cc9bd700aaf |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-jobservice@sha256:7f270eef82d93e66e40cc83df5467c3080c6bf75242cc09407ae3ea69b93555e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-jobservice@sha256:a128a7aabd6cecda5ccdbb3b8d5aac241e745acc19d450acc789aa406eaa97d0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-jobservice@sha256:d26f5957121b5125e96fa10c9714d8d513105da19348721579ce5441cf42cce9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-jobservice@sha256:533551fc893a31c0d8c815933b7f3b6e81c36c1fb5854cad3f5f7f2b4d27e926 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-jobservice@sha256:a929b2f9473c589c452ced680fec430a3a9c3318252056993c31289bda06448a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-jobservice@sha256:6736710c3e28bef3b81b6ee96794a83079f8e3f03db366844694a49b588634a7 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-jobservice@sha256:4cae25b6cab8d3e49f1ad274b45da3ae462d1e72f8c7c8ad6133e82eaf50b620 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-jobservice@sha256:f67bfd7ce0ff52a25ed8c824d90109dc56a48d7b3fe8594079497b4d8d0c3fa4 |