Sign inSign up
Deno

dhi.io/deno

Deno 2.x

CIS
linux/amd64
debian 13
Tags:

2, 2-debian, 2-debian13, 2.9, 2.9-debian, 2.9-debian13, 2.9.7, 2.9.7-debian, 2.9.7-debian13

Index digest:

sha256:22b9196a3156309798c9f66eac70bd5253aa68ec0ba4aada84acdc8612e0b7af

Manifest digest:

sha256:eb999f85932553ac3109603f5e2bfd1b57d87aa54fc068a0c61d864aacc68f3a

Size

102.50 MB

Last pushed

14 hours ago

Vulnerabilities

0
1
0
27
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/deno:2

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/deno:2 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/deno@sha256:1a6f37ec8543f294b0be6c68ac3661edd52bde1a98f4cf9cc7d88dcb9ca7152a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/deno@sha256:04d9b4643391d248b31e71e8e2fb21f7213ec4d34d8033e3b34e710f432bf0ca
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/deno@sha256:a501101177f988a27025745aee0719a0c911ef2b6e80c44a6c5bdc4566e99571
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/deno@sha256:0c61bb0edb22dd40ebbc2e8ce95168357c7ad5516e8c4a4c3bdfabf214df8319
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/deno@sha256:2c4df76169b231c10cf18df7639ca4730ad855e013a40a47586edc3edd7ece29
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/deno@sha256:29e0d21afa2c37b41b1c698d84fad1358959165b4a2344c2851224faed3ba703
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/deno@sha256:abb216ea989a19ae7d06846c9abcf385c9925aa948da2b913305c3191ec0ef2c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/deno@sha256:9a0712c39eaade667c35c581890d067193ef7410b566af9221a8db78aed2b278
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/deno@sha256:e07ac574f93b381cbd7b9b06ff5cb47ea6d05ca9ea1f6ba6c20749383e082b42
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/deno@sha256:ffe1f86dcd82ce4219e1470fedea779b67ac07ab2d777f6c5028689050bbe49e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/deno@sha256:258c820ecfd093c1265484503a283a9c403a9e11f7196cf6c5b0cbfeeaf83cd3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/deno@sha256:4ab11d8d143cde304815ab43c6eb5c3368381c81ceb1a35a701ac5fd1cfb6855
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/deno@sha256:8efb0d4be22e62928a9b4482c02da59c9975d77eca2c2776e672c62a27e7eebd
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/deno@sha256:e65576a0f079fdceec988ad138c0ed6855f5655c852499d3e4097983ae3873d7
SPDX SBOMhttps://spdx.dev/Documentdhi.io/deno@sha256:1143a5ef0f0e82b267058d46d3a9922f2b567822af638b6b4c2449a097857b48