Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:bf9356aa845f8e03a14785b2ef512671c056f42da8901ed4e905aeb9326805f1

Manifest digest:

sha256:f540bd26d3cf1e08a6a86ec38e1bb1e3d88c4ad658f618cc4a92815592a15c06

Size

196.92 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:9f611d7ecd14e9f41cf5083ceeeca3ecf735b24012b2b50af13610e4fa8fd9dc
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:294498e09d8a05a96750046d5a07c9c942e22af847f28a76bd3dc53ed4950706
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:6548d0f761b19910f4341d721832882686a09f60912b485a11844bb481c6641e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:ff4028831fb07e26366631ab11381ac713dbba449871a129514d8af096ef6568
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:dda8e74cca541c448a3299eb2a6387117c29c5adfbadf5b9d5b5959c1149b695
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:f9aaf10cb6c978b43a7b9bc803c3bb699ad040939151233b3b87bb80d6fb4067
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:c1e05751c666635456e89e15fd85270579c2a1804edc32a25c01b6f86e0740cd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:33698250fef41aa9cb2fe07f3b6a81506fa9c5a950c16eb8200014479d8b7fa1
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:ebb8acaebcb4dd8ebdf538a29d75d05fe804d80de115b084695a66a361a1b0db
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:2ffeffcf56dc875990caf0d6c1328e6c1c9c2bfecde0845b3b7890245eb9a6e5
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:340f481ea409054e85550bc808e4290e7ef1d78ec81069813b6d35adc23c112e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:f58e15887fe605e2000413573164eebb3d728c03af494d9bb89b36c43eb5feae
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:550e8ee8dc3ea55df06a2c5bff192530097f2b3b482c5d32d90e3c05ba904819
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:9e9548726ec5cac26e3240a03f2383af3353febb0b0bf221776985dc6e37cc13
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:68e2adf173f8b861f93fe5498a65b0aef009a0fff09318d1396465f901eb8aaf
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:5eeeeae32e4478bce9d1af2ba5702cc2141fbf63acee2e0cc81f345d9176018a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:59e3dfabaadcc46d21b2899fbdfbd8338cd82a3194e32c1a16469aa1b883a277