dhi.io/harbor-jobservice
2.13-debian-fips-dev, 2.13-debian13-fips-dev, 2.13-fips-dev, 2.13.5-debian-fips-dev, 2.13.5-debian13-fips-dev, 2.13.5-fips-dev
sha256:2659496820b5372131d1ce97492666a7797d4b7a1f5e52ffdb15ef1b5b3e72a3
Manifest digest:sha256:5f0f589ca899807e524fb47f85a27d6875dfbf8a12675ab147118437207ca37e
Size
47.32 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-jobservice:2.13-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-jobservice:2.13-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-jobservice@sha256:72f3c57ce803a2cab31f6df46a0695bc5e7b969bab295a53b4a3db9cc1195104 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-jobservice@sha256:c171b79386e389f41c87efb6d6d9aec65ad1ce0e55f4cdd9251f8916e6850a68 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-jobservice@sha256:ca371d19ead9a59ff8f74cf17fe28ca17807a79754485f5dc85f71fcec318333 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-jobservice@sha256:38a820e66b76a60d0dedd481bbcf1038712254b113bf12f8828657af61564287 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-jobservice@sha256:cef7b2ced444fcae15ca5a6f6ea88a54a4d3ded877b3607f334fe58c26206802 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-jobservice@sha256:b0bc7a071a848f1df37ad0445fdf68978db74d0ccdd4213dec97f8bb2717834c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-jobservice@sha256:c7f3ca9173b903a79b37d61660c8c5b3b478b787c0a9ff3a6d20bdf3176f917b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-jobservice@sha256:c0e0d6946bc97737d7032f75ccb6b2dabed4bfe7a5d2511e331d3cc8efafb42d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-jobservice@sha256:9d1776884e9ef172bb2155cb2b83a4c7ce69ecf47064de528299ea7f683a862e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-jobservice@sha256:be416260535529797291a93ef726bd27dba2c23da64d799c3aa2b9de7d4d8f4d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-jobservice@sha256:748836d71166416f6163963627a4e374295dcbd49a77b7bbb6e08c97f28efe07 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-jobservice@sha256:0196fc1122c19822c4dea402a770d915ada8f12bdf219012588c5d2f858f3a1b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-jobservice@sha256:40cba0a6935d10b627cb9b571c5c1cb2a904b3711edcfd2c4be4472f0f05e966 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-jobservice@sha256:2ef1d02dbbe1082242baed441248ebcdafa9b7b025f231a276aa6c1c58917677 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-jobservice@sha256:d84970feae10835aaae81f3a5f34b1800a7f9e7884d98a0cee548d0537768aa3 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-jobservice@sha256:08f5d240eb6b61651af726b21fe7b63a10ced73cfefa809894889ca5a52d70e4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-jobservice@sha256:a39ef4ab6d0f173b2734cb5bd41001f837ff806502404cafcba35a50d97e693c |