Sign inSign up
Jenkins Inbound Agent

dhi.io/jenkins-inbound-agent

Jenkins Inbound Agent (latest) (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3390-debian-fips, 3390-debian13-fips, 3390-fips

Index digest:

sha256:6b84c76d063e88da0952be5e2c1243455e8f687164b806de60d38a1130bf44a2

Manifest digest:

sha256:61734fbb33f169bb58a3fd79de894b0434d46536bcf99f85fa6ad387dc3694d7

Size

90.54 MB

Last pushed

10 hours ago

Vulnerabilities

1
3
0
10
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/jenkins-inbound-agent:3390-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/jenkins-inbound-agent:3390-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/jenkins-inbound-agent@sha256:f3642becd12308e510f023804a335337af45e1acddcc7d25c1e25e0eec599702
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/jenkins-inbound-agent@sha256:cd6e44b0893f25559c0c720e13f660b330320924b78836cc07b11e11d814be09
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/jenkins-inbound-agent@sha256:c7e9f4bbadce0557667a7cee51dad44d8ebf195e994abbfb83366a50b0c59e42
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/jenkins-inbound-agent@sha256:4e5eeec4c01ecf75cfd55ea99f2dc2a4833367dcca7a576ced2f59e3f7d85af2
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/jenkins-inbound-agent@sha256:a0cfbd8f4703041e4f06724582308740b4074584a46f668e7b07ada023a1da7a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/jenkins-inbound-agent@sha256:a17b701b377aee802d4e58a23631b71449092ce0d04ac4b099e95a205184805b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/jenkins-inbound-agent@sha256:29032d526e9c6ea433279f19aabda05a93fdac462145366780a4a61ddec5eb12
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/jenkins-inbound-agent@sha256:c0cd0f3749fe781ef40b14b1334e934d12098656889b213b9830bc15f6ed55d6
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/jenkins-inbound-agent@sha256:81ac0c19a24a4075c1d5dd0bd63f64f710e2d949c5c85830b3e3b100a720c10f
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/jenkins-inbound-agent@sha256:52dd0d6e8b962f432a9c27ca1bdf0f9659c9e0ae246c85aba415888fdf3f7ee2
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/jenkins-inbound-agent@sha256:96c98b9f119e336efa65abbb8928b2ac055473b4531f44b7d3c2d89bcf2472c5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/jenkins-inbound-agent@sha256:399f4bd2beef1fbb97d2c9bb1ad42f5d9102aec01ca000f96f229918a9b69534
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/jenkins-inbound-agent@sha256:361f0c8b1febe3277570623923022e189e0f1ae78978413641f91ffa702d48a2
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/jenkins-inbound-agent@sha256:6fd2795e562f38328e6591ddc169aec0dfee91d0cdf7a34bbff932af624d3faa
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/jenkins-inbound-agent@sha256:81b9d8326ca7851cafaf2580bc53288deaac93f03cb375b8bca9a6bb2a4707e1
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/jenkins-inbound-agent@sha256:3c43f09bbebfc5c070e6b04c18bc1611f44c1549b6599d2412c1f342d3a1923f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/jenkins-inbound-agent@sha256:b33c2eeafdb9a0f47c076069bf81ce2838d5d65627ada5f5d80cad71fa298ee3