Sign inSign up
SapMachine

dhi.io/sapmachine

SapMachine 25.x JDK (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

25-jdk-debian-fips-dev, 25-jdk-debian13-fips-dev, 25-jdk-fips-dev, 25.0-jdk-debian-fips-dev, 25.0-jdk-debian13-fips-dev, 25.0-jdk-fips-dev, 25.0.4-jdk-debian-fips-dev, 25.0.4-jdk-debian13-fips-dev, 25.0.4-jdk-fips-dev

Index digest:

sha256:00d5a8c2dd25a324d0eb8f7a7cb5e4d5414b0fb422f3b801d58da9dc17dd9c1f

Manifest digest:

sha256:b352731b1dbd0a40327c761210672b58889c9d986b38e13832da3c58892096de

Size

176.18 MB

Last pushed

3 days ago

Vulnerabilities

0
1
0
6
0

Support

Active until Sep 2030

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/sapmachine:25-jdk-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/sapmachine:25-jdk-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/sapmachine@sha256:c1d947ded3e35339102900fffda13c3b326c2aae1db76293aabefba8b5e57429
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/sapmachine@sha256:6abe03c72dbde62169233f3bf3ef0b0389b5e55b8c9412d121ffc878f190cf3e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/sapmachine@sha256:e31ae18d34fdb2716c5c91303d43f4225e54b598c4ab440cd1d4d4be3ad046d3
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/sapmachine@sha256:47f67aeac242571b03d61087196d22a01c42d31685a25f02ee919b41d54e9ab0
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/sapmachine@sha256:6ba918816f8bde72c9323b32280a8b2a34045ff590f5cc8449b170b40bc464ee
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/sapmachine@sha256:3143902dc9fb2fd250c073e9ec1a4684cc6d002dbd386d4595a6e4b606629cb8
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/sapmachine@sha256:b6f7619675f04c33d27c56447b56f55866a19bc25e7aa309365db243de0f8ee7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/sapmachine@sha256:96a4380a27fe8930e0e6a201cbf1ca2115ecfc41d9f11c0187ffb5f279b59f4f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/sapmachine@sha256:d3c730c1c514c3c2c4dfab915878ed8c1b0b08c01023801037ed00760de0f813
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/sapmachine@sha256:7b5b9e24fd79c09157f9cd37ff8d007eaf3bea3085c23cabbe1d18ad245e2159
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/sapmachine@sha256:ab2548e8b101b95220adbece812cf078111ddd2acaab754f2b5eab17e5da59fc
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/sapmachine@sha256:49ea1535015c0a52775419a9c855eb67f4a4fbb4983ff35c7e3f62b78101a6e1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/sapmachine@sha256:5dc84ba846a1a899f6cedf962ecc16e30a02882a19cf9ccbcfc7cecdf6b97d34
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/sapmachine@sha256:185810d3c73e91cb135dc4ebb292bdaa65112b82cd2058175f40230f2f77b31e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/sapmachine@sha256:dbaf7ee601b3a7cb70479beb17e30428c80f536a2a6fe03bc936cdc53ed9618a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/sapmachine@sha256:d48835c60595cabca317c2e36b602e398acace0b9655dfb5be39d969613532c8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/sapmachine@sha256:46a33452a5e7a9f7d755a1d35a906c9f88c3f6987202bfa21601a322c3415c88