dhi.io/harbor-jobservice
2.13-debian-fips, 2.13-debian13-fips, 2.13-fips, 2.13.5-debian-fips, 2.13.5-debian13-fips, 2.13.5-fips
sha256:1f12ce6681b5d0c8901e19e122c9f98348d55ef3af6dfa75c0c3e34314cdc94f
Manifest digest:sha256:efbee79c371e002cab8654e8f86ccda2182d1f9fd3068eae54cb4a9077c9b6fc
Size
20.93 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/harbor-jobservice:2.13-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/harbor-jobservice:2.13-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/harbor-jobservice@sha256:adbcab56cbce7e33b264b0bbe48a3cb6557bad939ce017968ff9882b907b788e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/harbor-jobservice@sha256:8e6fe8a81be57514185a3dbf1a46e9f51014815902629fd098135e5118817d04 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/harbor-jobservice@sha256:4078561f2967b27a3ba9ed88eec836cd58358951a2978fc3bf3fee64e7fb93c0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/harbor-jobservice@sha256:1f0a38d27b273abb376e1aa84242d5e2147f5857b387a162eb1eab61052582a7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/harbor-jobservice@sha256:f50c06b9fa889a7c704ca144d23a560eeabfb402064979fbf1eeab20084ee58a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/harbor-jobservice@sha256:ac7a51022b02810545151d2d408520ed7ef34f150560c53e3b89f5a238b7c9f2 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/harbor-jobservice@sha256:f6d7eafa046b3ba0b52e2160669f21f13d2eb8e1a458fa42be4422f737cda160 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/harbor-jobservice@sha256:7f0d03d5358013a88f7b1565b1e2aa6e577f3c8b8823d34437ec98edb463218d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/harbor-jobservice@sha256:1970a1587a6e249733b51f6f51fa997b20e45f597ef16b8b351be2d06d10af07 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/harbor-jobservice@sha256:7a85430e670ae8f8ed31c9d668eae8ee992dc46e69bac2dec727cb4989eb443e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/harbor-jobservice@sha256:ec73489c177e200ebcf7d3cb552c357b7702c36681b65603c0c1035238932dda |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/harbor-jobservice@sha256:97c06ac0f27b147bb49bf918de409023a50799304072aaedce1c313af3719565 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/harbor-jobservice@sha256:2496d84380775e9e4de3ff5495f19b2066c437fafc0aaf6e3ef4f54a059987cd |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/harbor-jobservice@sha256:6a03b897f83035ba7aa49ad6022be81d3f0fa07e7bb7be62ed721afec61f5f9e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/harbor-jobservice@sha256:69b6931eb1154baafdf217083f6699958ed879aa812c7b4dbb33c72396d045f5 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/harbor-jobservice@sha256:1cad301e94eca10049d63dd6908e54d4bc2afbbde3ece0c28a6332a4971a36df |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/harbor-jobservice@sha256:2883a13547c1ccaebb52766cbe1dfd43819bd1f6dd53fac191fd6765d73533a6 |