Sign inSign up
JupyterHub K8s Singleuser Sample

dhi.io/jupyterhub-k8s-singleuser-sample

JupyterHub K8s Singleuser Sample 4.x (dev)

CIS
linux/amd64
debian 13
Tags:

4-debian-dev, 4-debian13-dev, 4-dev, 4.4-debian-dev, 4.4-debian13-dev, 4.4-dev, 4.4.2-debian-dev, 4.4.2-debian13-dev, 4.4.2-dev

Index digest:

sha256:929c28b954c56c5cce3267109713ef5fedae126eda99b0afdf3841a8ef932757

Manifest digest:

sha256:a82474ced68bfb392a6000262442fedc0b2d99b04e80b7d92249bd68d8dc6242

Size

115.46 MB

Last pushed

7 hours ago

Vulnerabilities

0
7
12
15
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/jupyterhub-k8s-singleuser-sample:4-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/jupyterhub-k8s-singleuser-sample:4-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/jupyterhub-k8s-singleuser-sample@sha256:1424929e49571942c6cb92855f2fa9a2ecf2a8ea4e563ae08b9885a819b864c4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:3143bcbb814f006cc94962a8f47b5c8ed6ab3299bbaebc8ee4bf10fa2a7d1088
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:672937b199b1f92b01ff7fa0af7604f77b7c1a2e87c0c6dc280e3233c06fc5ac
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/jupyterhub-k8s-singleuser-sample@sha256:f742a0ed2075c8f73f7ee8ca600408a755ff91d36cace7077e3b5ff4b1f73956
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/jupyterhub-k8s-singleuser-sample@sha256:e612842353299d78435fc96084228a7af7b54c812dc6c404f72fe847ef6a6ffd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:b4e0975ecbee0b2294e9ec813bbbc967d8ff8c8ab884c0c71f205b3385fb86af
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:7a4830d056a5862ca4368acd377cf56377e52e90b93a988b1916c09c50444a76
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:89d23400e4f96434134439debd76fbac7fc5555dc7988b8d5a01771e9c29a329
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:1b0640680c1ebbb9e7eca9ef75723d1980bac51b80e2e253d6e2d7b1d7cefb85
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:8eeabec6d1fcdca04ac9c29fea803dcdc9f204e67d113ac2fa0fdffea86e9e77
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:a76f588e624bed9edb9cb64b85812ac4717b4738732ca3f6198af7772d1c621d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/jupyterhub-k8s-singleuser-sample@sha256:518ce1b82d36da7e206bf957389473e42240738168fbf5b1b4e509c96f164bd5
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:05c5853870974725a38b01db7cf23a6d6a987738a438801be412586ae030aa74
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/jupyterhub-k8s-singleuser-sample@sha256:409149abd3318590665a15299105d3f2571757df9b6241d172fe7278fc3f4cf4
SPDX SBOMhttps://spdx.dev/Documentdhi.io/jupyterhub-k8s-singleuser-sample@sha256:f1033b57367284e0b3856bf68151f19dc110793996f33c0f5fa59ec1e830cfd7