dhi.io/harbor-jobservice
2-debian-fips, 2-debian13-fips, 2-fips, 2.15-debian-fips, 2.15-debian13-fips, 2.15-fips, 2.15.2-debian-fips, 2.15.2-debian13-fips, 2.15.2-fips
sha256:1326f584a9b254d3f628189aef5d8dd3e1e18db11034059cad92b8d991b41556
Manifest digest:sha256:e6231ab42db8ca602f0f69c91c7a70f801b0a3698825950f00aaaf85aef04534
Size
22.39 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-jobservice:2-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-jobservice:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-jobservice@sha256:94f6d6a3ad579f60e0b6faa97d9d99c36abc6acfb83a58bc143e65ebe381ba88 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-jobservice@sha256:cc2b920e86334765971f56bcef2e0530012a51cacc6f5fed5e729803e6f2fcac |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-jobservice@sha256:8d04713d1e35723a98c654298d2ce8ec910ebf824ce12f6562831145391b5464 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-jobservice@sha256:a0b8ffca01d2c2a85ee57c7e094a29e27b536173ea9dd5073c70bcd8236f1e98 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-jobservice@sha256:a7ec2b4a33b5cdfd3345e16a01b5caf209a2cbb020e4e91af06c79a396ba0862 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-jobservice@sha256:44bd50011fd65677d56fc4b40a75bce8ae85e9671ece91699f2d41aeb5cdc694 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-jobservice@sha256:2860de87e6f2ba3204a67d4c9e11280a610a220e9100e7f2f9682b39620a4907 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-jobservice@sha256:63db29054f15e56d552be26e0be65f23ec1cdafda82e079ecd60a2941cbdb17e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-jobservice@sha256:b20488976709a7574b4bc8dcc5e24bfc60ec582d5170c56531d4f560bb1481de |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-jobservice@sha256:5be05a731a839183127ed1148fa004d96c320afb8b08fc2511ae5f815b147b3a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-jobservice@sha256:c74f3037f0298f1a3963867c17bd10bf015c9214833b2ef3476bae022869c5e3 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-jobservice@sha256:8bade303065e21544041185c83f99394d949626ff0056eb77227399f18ddb3f8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-jobservice@sha256:cd0686bb696aacf70161c68cd26dc4d5eadc860d8766d7f91068f970dd5ee1e3 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-jobservice@sha256:765d89f47c61ea75c46c1c861fc1b33ae03c31baf1a71b129539d7cacaea0a3c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-jobservice@sha256:cc025d9cb4275020a09565d5788b99240287b9af133583491e0ec6337aac8789 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-jobservice@sha256:48fa6db19dc6c63098c25b5a26cfb2d35125be645a89bf98ccce4bc7ccc2de50 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-jobservice@sha256:d07bc8d1530a89217dccd21cb98aeb1ae76f3e79220c87d0c4db5f823622f2f2 |