dhi.io/harbor-jobservice
2.14-debian-fips, 2.14-debian13-fips, 2.14-fips, 2.14.5-debian-fips, 2.14.5-debian13-fips, 2.14.5-fips
sha256:5292f69371e1ae2b66c7118f6bc6e1afcd2226f6e962e7e7a5ba5e1ea649d921
Manifest digest:sha256:e9ba67ae8e0287aef45bcae7d75014ed0b3005e82a01957b4da107ef3aa33e3d
Size
21.02 MB
Last pushed
4 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-jobservice:2.14-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-jobservice:2.14-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-jobservice@sha256:56d4804b3475c8b65cf9a4f3c3d75722f59dc53bc07b5e638758b2f806e005dc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-jobservice@sha256:e765b135e4deb4905e39ac78d661d94a380bbcfa835fe63be4a28fcad7ad14c2 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-jobservice@sha256:809d128617f191090cb36c1e8cd5697a007bfc77138b6b6da2c55b6a60b84a4c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-jobservice@sha256:2866cde6db588e044daa2fa3be0d970091f5bf30822947459829f18869f44fb7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-jobservice@sha256:847cf399e322a3ba468eebc3752b3215247f3a4719b5f04e76bc6a01de375adf |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-jobservice@sha256:03cad8b6626db5a6369498ebbe1b58e6c9a018613b589ab0b7ff9749769df181 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-jobservice@sha256:a8b15065ac70be59ba1391d58fbbf5caefc8c67b2e413c3b56865a7cf4da4de9 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-jobservice@sha256:52b0f86187af0ee6c75f9caf3e0e3193596adf15915c0fd68e25dcb6b01e9fc8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-jobservice@sha256:4b08b5b7191ff7a82e2263f6b3bda92cb558d2da4e8ab375d635d7e403c04d15 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-jobservice@sha256:14cdc9a8e3a80efdcd6fdfa0871a336c6f07b80cb22835c4db77213f549a0086 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-jobservice@sha256:ccfc77ae815e4e08ed970447cd6bd928f52b9fd9422412ee16a0fd92f889d49a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-jobservice@sha256:952336f294afe86203796c7efaf0afc0c1c33b2a46e12989cd18a0c8ecb43a02 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-jobservice@sha256:ccaf44ecde40cc72b7c386076cbc0971599839056b9e468fce9153106c6e44d3 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-jobservice@sha256:f71995cb9414f059cbeb24d9089a42993b82b297a0c7fec796bd95cec2a2afe6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-jobservice@sha256:3609aa2214df056718a8b1655dc477922719880de724098e9d897ebbafa32b71 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-jobservice@sha256:c1ab9c08f0fea2e08cfc13bb060eb7ee26b32211a0acd971760ba596afdb7d35 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-jobservice@sha256:906a5668e7cccd8bb0c4c93fb4e9ebdac15428355bf996b056b106f01faffbee |