Sign inSign up
JupyterHub K8s Singleuser Sample

dhi.io/jupyterhub-k8s-singleuser-sample

JupyterHub K8s Singleuser Sample 4.x (compat)

CIS
linux/amd64
debian 13
Tags:

4-compat, 4-debian-compat, 4-debian13-compat, 4.4-compat, 4.4-debian-compat, 4.4-debian13-compat, 4.4.3-compat, 4.4.3-debian-compat, 4.4.3-debian13-compat

Index digest:

sha256:b1b94e3be2667bd88947e9397dd1ab9dccda3cedc296cf11983141f1769b32cc

Manifest digest:

sha256:31e25b1a043e065fef45db05425a12e9224a0c4153bc74767127cbb3d626b81a

Size

106.48 MB

Last pushed

8 hours ago

Vulnerabilities

0
4
6
14
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/jupyterhub-k8s-singleuser-sample:4-compat

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/jupyterhub-k8s-singleuser-sample:4-compat --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/jupyterhub-k8s-singleuser-sample@sha256:92dd77dba46b3575a986ddd1edd15785656802eb4646b3b471b8c77cc5aa4f24
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:ffeab3ec995a2bdadfbfe43cc9aaf05ed60cdf1f06ec9bd04cf493113ffe9680
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:689363817806c5e854c218eb9ff8d95bdbfb16228811f889d08c5ad7d46ce71f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/jupyterhub-k8s-singleuser-sample@sha256:dbed708e7d22449f43b1aebb31becf3828da717df0a372dd5c0399d2ce0f4ae3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/jupyterhub-k8s-singleuser-sample@sha256:61b5f78cddbc217c6cd531ed85ff43109ce64134a2b75a3ab9c97dd6113b9b1b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:67508748178d634eeb151280a02dc709d7e829bbfcb36d47557a65819bf93c3a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:e71b63a51743ac2a6fd4c1bbf24a1105aa1af3d26537cc9dfbe1ba06a3d1a85b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:2f840f6709cfcd109ce98c249af04e57ffef079c4a10c2233c18d0f491deb475
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:974e6d50ece74454ec5e56f03df43a26894d0a4edc7e6591e6422d55b094dfb0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:e8f7cd0551258e62d6612a6bcfca19cfc20d42eba3aa17b84dd12a8e3a0264fb
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:ee2d6d91b4ee3aff1441cf39d9bfdc5c07c906031c8f7307f71f51c90855279c
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/jupyterhub-k8s-singleuser-sample@sha256:d152097d571a68eac5196920dcdd6556af71e36eb20b815bf002b57889909a6b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:0e7174791cf2f045c4e01049e6cbf6a4c06862e6705593f699d9167c07ebd1a3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:ca7b8df6b35ed5f472a75604c68d1856c6d58ac568d803c4f11366e047855f85
SPDX SBOMhttps://spdx.dev/Documentdhi.io/jupyterhub-k8s-singleuser-sample@sha256:5ea0d7fea4173dcffd91016a2c38d2411e9ed83e54988e78461de595c67894b6