Sign inSign up
Jenkins Inbound Agent

dhi.io/jenkins-inbound-agent

Jenkins Inbound Agent (latest) (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3390-debian-fips, 3390-debian13-fips, 3390-fips

Index digest:

sha256:4ee5dd51e993f453a9714a15cf75d4526b40971f13c1f6d80a6d41fa6c6fe043

Manifest digest:

sha256:db46d092f4c472baab59631c4d33a6011e25c9db9f7126912d272fa7c31ce3f7

Size

90.54 MB

Last pushed

8 hours ago

Vulnerabilities

1
3
1
11
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/jenkins-inbound-agent:3390-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/jenkins-inbound-agent:3390-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/jenkins-inbound-agent@sha256:db1c70f962eeffe73bc72661b553cbfa10f0d2b8da1d4fd7d325cf362bc58cd8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/jenkins-inbound-agent@sha256:ba27a84905d21a13939386f45f8d890ec672f08c535cb8040527e62ad947bf61
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/jenkins-inbound-agent@sha256:85a70334094edfb0d7c9c38b777dfde4530d4025943514d31f317046219ef7b4
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/jenkins-inbound-agent@sha256:22d5a5f8fe093eaacc8527d159266022b324ede5984e7054454c3fcdd8e2a957
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/jenkins-inbound-agent@sha256:e71366b6f501ac8b9e2d39aa54170b34b353890e79a5c8ea171182fe18b0560e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/jenkins-inbound-agent@sha256:f123e0f52f37c914863ca1585b8cefb71ff2a7c67f3da5458ed3ec2e3e4e061a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/jenkins-inbound-agent@sha256:1ebcf732731c390a7e1dad006d739ecb229e4ee6b67feecc5818b45dfeacafec
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/jenkins-inbound-agent@sha256:57c67d6f7b0fb9f63428e7b35abe62cf6a9f43f9d9e48208a17ef4052addd63b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/jenkins-inbound-agent@sha256:09a0e312857095ac898d97eb5f8854b013648e7eedf8867bff623743e4b9227d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/jenkins-inbound-agent@sha256:9ac140126f7768968e5d81f6752486f805abdb91b9cc063b0514fbf1e3aa8461
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/jenkins-inbound-agent@sha256:cdd93bbb2cb92a84dffdc89ff0c479f985bb8a375b4f89053d92a52850dd24d5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/jenkins-inbound-agent@sha256:f5800b217cc2393d2d64b4d8aa33b03c16ab926c1265ff1ec135e0ec029a6884
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/jenkins-inbound-agent@sha256:3f5fa3da1c3c6b5670a27fa8244c7bf238994fa4633632959f8b77dd983d2ece
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/jenkins-inbound-agent@sha256:1e5ad2f2be6eaa5132dd55008f51e2fc53154e729b19400716911e302cdba4e1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/jenkins-inbound-agent@sha256:df3c995a3d22815fd0134703936e98b87b25feca252391793e08037cd3f33adf
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/jenkins-inbound-agent@sha256:d91e70e0eff756f7033765f9e67b3740cbeb5b9332a52246817eb673b297855a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/jenkins-inbound-agent@sha256:6d98d1d6c0bbfa6f8466811972897c88c5e23801de7197dddc574601db5af782