Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips, 2-debian13-fips, 2-fips, 2.15-debian-fips, 2.15-debian13-fips, 2.15-fips, 2.15.2-debian-fips, 2.15.2-debian13-fips, 2.15.2-fips

Index digest:

sha256:1326f584a9b254d3f628189aef5d8dd3e1e18db11034059cad92b8d991b41556

Manifest digest:

sha256:e6231ab42db8ca602f0f69c91c7a70f801b0a3698825950f00aaaf85aef04534

Size

22.39 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:94f6d6a3ad579f60e0b6faa97d9d99c36abc6acfb83a58bc143e65ebe381ba88
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:cc2b920e86334765971f56bcef2e0530012a51cacc6f5fed5e729803e6f2fcac
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:8d04713d1e35723a98c654298d2ce8ec910ebf824ce12f6562831145391b5464
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:a0b8ffca01d2c2a85ee57c7e094a29e27b536173ea9dd5073c70bcd8236f1e98
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:a7ec2b4a33b5cdfd3345e16a01b5caf209a2cbb020e4e91af06c79a396ba0862
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:44bd50011fd65677d56fc4b40a75bce8ae85e9671ece91699f2d41aeb5cdc694
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:2860de87e6f2ba3204a67d4c9e11280a610a220e9100e7f2f9682b39620a4907
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:63db29054f15e56d552be26e0be65f23ec1cdafda82e079ecd60a2941cbdb17e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:b20488976709a7574b4bc8dcc5e24bfc60ec582d5170c56531d4f560bb1481de
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:5be05a731a839183127ed1148fa004d96c320afb8b08fc2511ae5f815b147b3a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:c74f3037f0298f1a3963867c17bd10bf015c9214833b2ef3476bae022869c5e3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:8bade303065e21544041185c83f99394d949626ff0056eb77227399f18ddb3f8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:cd0686bb696aacf70161c68cd26dc4d5eadc860d8766d7f91068f970dd5ee1e3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:765d89f47c61ea75c46c1c861fc1b33ae03c31baf1a71b129539d7cacaea0a3c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:cc025d9cb4275020a09565d5788b99240287b9af133583491e0ec6337aac8789
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:48fa6db19dc6c63098c25b5a26cfb2d35125be645a89bf98ccce4bc7ccc2de50
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:d07bc8d1530a89217dccd21cb98aeb1ae76f3e79220c87d0c4db5f823622f2f2