Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:1ab61a981732268df52f4737899f2e121b2ec1734a8b3db1369b8584e7f0ad8f

Manifest digest:

sha256:6981ca6a785727b593118295a2f801f3d61baa7f658634b28f3a7c6c9cd2e53d

Size

196.92 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:ea9fb5ea8e74d22c206a7b75b5440a7d2a6557a40af4eb07ec61849604585170
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:b832d15665df02c4e3a47578f4de39e8014f1d94b0d1ab57737944e074d196b4
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:dd13accbd92a6d209bac3d109cc8112ac1dd00beab5fe8ecaea0cc99a0a84363
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:327a3de36b8ca884757aad615c8225105cee3bd93fe74d0352047b9e7d6019e3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:2ab385f8097cbd916106c2501a38c828cfe33b850b841da547562deb0c83d6c8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:a522e7b016a175d0a69d9ce8e29d0f9dc56fd1665de616c236d64b5253148be8
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:7bed5afcb329cae0ec054d26f1982540cf2f0df92ee420cbacfb2edd67923dd2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:074703ccc82bad9928144744977ae15ea4672315ac560e18a9147465f0d80d02
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:9560ae605b0c124a60bc66cc04ff59ef4ac9236db8ccf80bc1f5d66b71baf41a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:3fa14fffe4da4204c946c66957282a196a6b41ec5d65347c13cc0df8394e1958
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:9b76fb6f08189a1bae47f07cc9fc5170e1cd7e7060992f3875df31d7cc9aeb46
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:bfb420550dc5115745303f8bcaaae1bf6d141b74b3f5e5a81da8a8cc6b15ef2d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:e040176f612c662828ee6620b7c38f0ca85b5306076cbcfcce427ae47c18ab0e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:0ae625b7d37749bfa5cb99a23b5b5694ddf218965b10d85587b7a5fac8896b17
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:4d40ccb82247a1da164a68baa9b03f2a6b9be787e386ca92324ef03b1a577cc7
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:440c0e53dc1ef6f0e4dcf2b11421e803f866c64c9d89c34c6b93c9de2bf30d39
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:4b1f2aadf39ed1376dd46f49671c79e283252fa1d6d26294a65d403fce49ad5e