Sign inSign up
Harbor Job Service

dhi.io/harbor-jobservice

Harbor Job Service 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.13-debian-fips, 2.13-debian13-fips, 2.13-fips, 2.13.5-debian-fips, 2.13.5-debian13-fips, 2.13.5-fips

Index digest:

sha256:1f12ce6681b5d0c8901e19e122c9f98348d55ef3af6dfa75c0c3e34314cdc94f

Manifest digest:

sha256:efbee79c371e002cab8654e8f86ccda2182d1f9fd3068eae54cb4a9077c9b6fc

Size

20.93 MB

Last pushed

2 days ago

Vulnerabilities

0
2
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-jobservice:2.13-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-jobservice:2.13-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-jobservice@sha256:adbcab56cbce7e33b264b0bbe48a3cb6557bad939ce017968ff9882b907b788e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-jobservice@sha256:8e6fe8a81be57514185a3dbf1a46e9f51014815902629fd098135e5118817d04
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-jobservice@sha256:4078561f2967b27a3ba9ed88eec836cd58358951a2978fc3bf3fee64e7fb93c0
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-jobservice@sha256:1f0a38d27b273abb376e1aa84242d5e2147f5857b387a162eb1eab61052582a7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-jobservice@sha256:f50c06b9fa889a7c704ca144d23a560eeabfb402064979fbf1eeab20084ee58a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-jobservice@sha256:ac7a51022b02810545151d2d408520ed7ef34f150560c53e3b89f5a238b7c9f2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-jobservice@sha256:f6d7eafa046b3ba0b52e2160669f21f13d2eb8e1a458fa42be4422f737cda160
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-jobservice@sha256:7f0d03d5358013a88f7b1565b1e2aa6e577f3c8b8823d34437ec98edb463218d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-jobservice@sha256:1970a1587a6e249733b51f6f51fa997b20e45f597ef16b8b351be2d06d10af07
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-jobservice@sha256:7a85430e670ae8f8ed31c9d668eae8ee992dc46e69bac2dec727cb4989eb443e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-jobservice@sha256:ec73489c177e200ebcf7d3cb552c357b7702c36681b65603c0c1035238932dda
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-jobservice@sha256:97c06ac0f27b147bb49bf918de409023a50799304072aaedce1c313af3719565
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-jobservice@sha256:2496d84380775e9e4de3ff5495f19b2066c437fafc0aaf6e3ef4f54a059987cd
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-jobservice@sha256:6a03b897f83035ba7aa49ad6022be81d3f0fa07e7bb7be62ed721afec61f5f9e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-jobservice@sha256:69b6931eb1154baafdf217083f6699958ed879aa812c7b4dbb33c72396d045f5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-jobservice@sha256:1cad301e94eca10049d63dd6908e54d4bc2afbbde3ece0c28a6332a4971a36df
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-jobservice@sha256:2883a13547c1ccaebb52766cbe1dfd43819bd1f6dd53fac191fd6765d73533a6