dhi.io/clojure
1-debian-tools-deps-dev, 1-debian13-tools-deps-dev, 1-tools-deps-dev, 1.12-debian-tools-deps-dev, 1.12-debian13-tools-deps-dev, 1.12-tools-deps-dev, 1.12.6-debian-tools-deps-dev, 1.12.6-debian13-tools-deps-dev, 1.12.6-tools-deps-dev
sha256:17c02cfc35bf4a5fac589286d9cbff678770823fb30838bff514db948ce0751c
Manifest digest:sha256:092798a8fc86b31bb08a521e226cdf8a43d86b24d7fd3de729cf49d19707e66e
Size
186.86 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/clojure:1-debian-tools-deps-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/clojure:1-debian-tools-deps-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/clojure@sha256:2f1ce9b78a23884e42157104b414f5cc727c05d081e17d35995019ca93d40a38 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/clojure@sha256:5d5bbd7d2dde270f1bd635b45f1701892f6d7f8a79d2c9e1209c261a6a0c3533 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/clojure@sha256:f624c8268eae89f6ee409fdeec7832c65262ae8a33e817eb434cac9959c02b61 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/clojure@sha256:97fb018b7557e1cec386457ffe20cbd8a176336f7de5b3f01ea7f740424e83cc |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/clojure@sha256:6b21c62843fb470cd7dd7e0bbc02bb9d83181b031f70ec5c3d059e7f886655d9 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/clojure@sha256:65e93df107cff604e7ac88a3f4d9657ec60f0712aeea20dfb09f0e3bcbf6658b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/clojure@sha256:35d2e12a055c59961141717ae41b5b4a44d86c16d2059d047d935508f865eed7 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/clojure@sha256:81fc16a549914dce5f5bc4020356ab1ff73916cf57b970a8b9c09e2648f37c58 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/clojure@sha256:24e0370d637f9338268369b6fed352d4dd5f08e3da8196df0d90953fd8ff9a0f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/clojure@sha256:41555b1750718ce8922140806421d12f433e1f6bb92a1776c93ead54e5db9bb7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/clojure@sha256:1a1e371a2d99f3019d6a58e09896c8d75fc784b4ef2f5854a123db8da76fff36 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/clojure@sha256:2fb76a93e57a911f25e8b8645dec940bb833b471990aee0d8f77d463e6ec674d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/clojure@sha256:a5e3d7488b21e2b30686bf6a4ef9f8f30347ea52d6b0f4077e5ba6bdd1c20bad |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/clojure@sha256:34ee99d5dc5e23e7d618048ce6fa11183032c449712493362030c76847f735f8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/clojure@sha256:b6239903eaa41397b0e7140959344b264b6f25ba27f9a2173e36d1a0d7e6208a |