Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.14-debian-fips-dev, 2.14-debian13-fips-dev, 2.14-fips-dev, 2.14.4-debian-fips-dev, 2.14.4-debian13-fips-dev, 2.14.4-fips-dev

Index digest:

sha256:30f4cde5bdf644771f6d40cecd7d2e15d48a69e1d0ba7c8f824fec932e3b85c7

Manifest digest:

sha256:fd8ab2795f95bde3fa9416034a5bfb69b508c82f4e049c12a225c74c1b787564

Size

47.44 MB

Last pushed

2 hours ago

Vulnerabilities

0
2
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2.14-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2.14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:4e33f92f39920a48d35f134baf37818c2504a09896463ba6b325b409e92c7e52
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:ff818c685a7133974aecf2f7b0887b02002beb58cb12289093e4fc6af6785ff5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:465c501a89547500b9883e2169f7188c679a25c141bd47cfa816e642d30f044f
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:38d2436bd9ca765dfd661cd4171a63a50df100113c202a905d8bb38bcf2d4036
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:ada87235d423ccf945ffbb662880fea06c2969bb7e6839f5940550c3a75b5834
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:7085f3cea24ffa2c89d227e494c4104b97ddcad29e65a6ebd0e146d306646f6d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:2f54ba4a22c139be036250fe6a7aec586668d6410e0e1135cd5706091cd40372
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:0d8e61440c55da319d4104d81cccc65c3d079adb397c0aa2b4753e88170578fd
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:d80bb7c39c7b2b43af59efafc6676d420798030e59f3a11ce3d48325ec5fff25
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:32dec6eb691d3f722753dbebd390da4883e0b57edfec3ec6f36896b8f6b6b685
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:8dfa444dcf7e6ac7bd0540db51b95b45a6afca8a8b37ee7ecfff8fcc76a1ebe8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:efd5a85133735010005471eb3b20860b139100a88f345f68444ae225dcefff40
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:7ce7e7868b9eef339245f9a7e7b712a67292e914426d9de0dff2657211201f00
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:3ef903dfefff486a8d0d5f08dadb32aac3c7fff8d61720026423ed51f1245292
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:80c3dbed63049e9d7fb00ad1a96b99a1264422a133eca8417d834ed16c2efcd3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:295f02298d95e5f3618a5ea409706ae75866d6e106e3e7715003c05e1dd0daf9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:da7a2c1cc81e8cd2dafbf7488acad458e39f92b321760954bede81469cbf6a72