Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:8afd9002f459cce34db96094ea058cb76f097ac6dfe86eff611e54ddc2ad37a4

Manifest digest:

sha256:39e55a8e41849c67b38fe4c23f854d893c46f92ea6254f6563a54bb6916a5868

Size

196.92 MB

Last pushed

4 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:00ddb544172139ae49d179860017343601f0db8de7feaa3e743f1f0d809bdbd7
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:fc60744ae1b232f0c71de87f9cb9789f9e45861dae6bd388141427205ce25043
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:25ea0a8803c09a6f851534fc8b2a958313bdd302baef96fb448b467dbce0fad7
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:ddf5f51f4e17769c56c14456471092d3b2319f2c1adace7a72b5e6f15908e409
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:1c178fc490d78ec581a1466964ae617f856bd69adb79e1e04f3e6d7d05f8e81d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:66fc827f351694fc059e03709799331fde8946bb808b0c6d8ae18c66059b557a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:c84a1cf843d022bd2e1c52fae332f56132e5d5dce5a14159dd0d099bb707f12e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:9b8c24e48fa890994058e6c7cd94e73d84396a30b8a06a118af365a0188a93cd
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:3492c53f7d9218c7123481755c3782cc7d69c26c07ba9428177a6bfd0efa6c48
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:442a2f7a032022c26334b496ef74c7a6f7ffbd456666b851ad713cb77bf83f55
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:b31fd47c985d399ede3d60799842e98f986a1e24441a4f53c85bb3746bd8914d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:b53aeea017d3a29456173188bbc4bb635aa74b02004b8f066a26ec2df2b8bfeb
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:613aa5a0b02e1fde62bf32282933979925755bc1733a350e32d109636f54d699
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:07775d444ab952ffcb45967d17ad0f1359275c768a8282e35370a01a6eea57f6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:93021babc2f203f1d3cf27198b097d72b36fa71e8b61e5c34bb4c5f4b97e7d31
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:9f82df8b4614c5cde41a58e8478823b19d13fb74be1c4cad5ff4c6585642b897
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:a1af6ebc7aebe88753a7a3ceb078832b6a6c5e9766f715e1830c2891a87d3227