Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.15-debian-fips-dev, 2.15-debian13-fips-dev, 2.15-fips-dev, 2.15.4-debian-fips-dev, 2.15.4-debian13-fips-dev, 2.15.4-fips-dev

Index digest:

sha256:8de7d0b9205e99c4b13f8c03bc858a98b39da5f6a802c8b3d5b753de7ee08f4b

Manifest digest:

sha256:3161ee312850d07e36e6f3a9672c8b3fbd59e2c2cd90a1d3861c98fc681cac5b

Size

50.89 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:c0044860de39f6cbaa9ea1359cab4d2e6e4e523c1ef31346e206e57f5709718c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:d0c2c3b8a9abe346f2f39d1bb15465b0cc3bb4ff728f233df18135daa901c5cf
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:d10968e27d7f8702677d48d75e5d1aaa9e5ff83257f28b359044b7147d1eb7cb
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:10467cf554fa6e62de39f9bbef8148939ac5f1529f42438433e4d88272885521
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:fa33c51333599a5140f26ca1520ffd36a6213509cd3665ca5824d3460bd7c5ae
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:28a9979806bc61db3e51b97aeb343125b3764a06d59d04fea343fc313e3e211d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:c6a327eafde1c81aa109dd08f9a9ad5c851934ee6c854f9a4f6882414ce606df
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:c86ee64546a3d0b78369cbf44fec08d3efd97c4a6b8afec185b9018d99934c22
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:07162ae56e7a65950ac9e024477d9986f50b2a1693496e0e7c7e36177257cd02
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:b32c9dbc660894e97d1ff656c79df016c423183c2dbc8abb4c6fcd392bfd37b7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:45bc16dbc819489cdd1c7e2fbce4048448a255256de0a55f5997e34588366f0d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:abac53818ec6356d87b56dcbbf0cf1050cd9b8b82ae94bbaf4f155cbec464729
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:f87e2e575023c0da62902a5e661a84f1bd72d993679d28d6b6c22859f0ed4c89
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:323390a875895fe1385eff86dec82beccba282df02de245b95060422defa698a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:7dc17ff060800fb9568a4435ff9b1ffc0c2674d067ac85eb7b59750a31962519
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:4b7fc8ecc7010c06a51f0ba76a4282f648fa8a552d9968924aac9842e3b3a081
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:26d30c94d7eff6a0456f1ce9b33f452a783ca9131ab5aaec72f4818cc7562bea