Sign inSign up
JupyterHub K8s Singleuser Sample

dhi.io/jupyterhub-k8s-singleuser-sample

JupyterHub K8s Singleuser Sample 4.x (compat)

CIS
linux/amd64
debian 13
Tags:

4-compat, 4-debian-compat, 4-debian13-compat, 4.4-compat, 4.4-debian-compat, 4.4-debian13-compat, 4.4.2-compat, 4.4.2-debian-compat, 4.4.2-debian13-compat

Index digest:

sha256:f76456b7738d6696b1a56bbca221bcfddaa828bda0acd546aaacf00a72684e7f

Manifest digest:

sha256:edd5d0bb1a1c1424e02bcc13dc846778556fd6fb4ed8852976cec3a03d7f0fcc

Size

106.46 MB

Last pushed

1 hour ago

Vulnerabilities

0
4
6
14
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/jupyterhub-k8s-singleuser-sample:4-compat

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/jupyterhub-k8s-singleuser-sample:4-compat --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/jupyterhub-k8s-singleuser-sample@sha256:23c3796f506e47fb81220dff6eb70403ce292d6897b1fd11d4618a6c68c3433a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:4dd0bb419a742fd9db32d7067e41e3e728665a27131f758b888b0734adeff916
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:d48acda66336877e63dbb5b444ae8d767e5101eac462d580ee74f000ce890131
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/jupyterhub-k8s-singleuser-sample@sha256:21a277bef6918a019fee9a116e6f0fd7fc78955be16267a60a52d7042cd215a3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/jupyterhub-k8s-singleuser-sample@sha256:13eb75a28e42bb394b41d5971405ec56a895a78f1210d9f1f03deffeea6da6d7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:6cc1652db528124b701f4d0bf52c21c4b629a9b1af64609b9167f2f5f08bf40d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:0bb019fa26eca8768614aba5563076dab9141a7265c2eaf380349018f06b8a03
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:c03a677ad7c5cdf3c6e2f1351d5ccd5cbd394ebbab5ab3ca4eb921b084337ec6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:5502c9904ec1a8b492d5fa38db12cce0c85930c4eb978162b519b7aa9d951ef4
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:022abde31bfee07c408719c70b7b24135f09bcb46a33041d15a8cdeb334cc560
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:7d1dd8064d287d711323787181624eb26cbf925fdd9a8eefce7cd5b71f19161e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/jupyterhub-k8s-singleuser-sample@sha256:94a5f5da43b7e1a7944fbca1d1206bab74c33e031d4bf9f5e2aa20194f306deb
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:608f07fa916d703bd6d61a6455b416c06b2ea69dd722b03ea92dab1b0089d74c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:bdf773459477176c22c01092e05e06a20ecc69358a8f620e6aaf6d7b93d6bcab
SPDX SBOMhttps://spdx.dev/Documentdhi.io/jupyterhub-k8s-singleuser-sample@sha256:b6dfaf97ea80fb94147f747dc402d61b43c5e335c27271419e1bd7e4799d234a