Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, dev)

CIS
linux/amd64
debian 13
Tags:

34-debian-php8.5-fpm-dev, 34-debian13-php8.5-fpm-dev, 34-php8.5-fpm-dev, 34.0-debian-php8.5-fpm-dev, 34.0-debian13-php8.5-fpm-dev, 34.0-php8.5-fpm-dev, 34.0.5-debian-php8.5-fpm-dev, 34.0.5-debian13-php8.5-fpm-dev, 34.0.5-php8.5-fpm-dev

Index digest:

sha256:ba0d179b094f8e364f9ca2cc841600c2b090bd8803b083126d18dcfe945eb14d

Manifest digest:

sha256:00d1f649cad74bc8dd59aa488dc24017dfa4b5c8fed2c149ec5929101746c86d

Size

279.47 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
1
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:691455eb9fa78394349fd1bdd6d10b052c25b3a8f1f65c4a4f495364c09aee5a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:2f295346a5014d7ecae2ba4b78d6919b9cf3a1ecb98e55c2e09e5cfe131a0635
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:ec9ac4d6ea64ca780b642fdb9fa51580ea230086cc17e519201f4a44e5e222e4
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:bb300aeb4fac4c606b2c77485c598384622fb419f939245769a86efb9d48c0f3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:2bb80a48f5999040c97f77540176dc86881ddfb199b283b01b53d8f1d1ca0b07
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:f43b69239a36990c568f73f6ddf213356596fe75663a8b13f8eafea71177d2df
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:501b833e50d261cefd4edbc98ca116bd91b5e00f71810ce39016cb52a22076a9
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:4ef1b4f33e0da4104cac28940fbeb7b94c9345f33762f0e433171dd54c6cf8c1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:003fdca4a07e876d4748cefd78b8a2c6a82da28248c0898ade45e53932e0a4c1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:86c4743b2033d71aaad9a5283e06b8953608f0c9cf20dc2145e4ae8ac11d1b91
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:ca4d42a254b1c3dcbd16d3d9ccd7699b9cff616d613a86adeaa1a49d45fc9d52
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:ad4d949e43199a5c5852f9321423a639aba7bd2865d13ab2448cd675b1fa63df
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:1f8ba2a26a65992facc6448126dac4acd387f613e7dfbb33cda3701281c94615
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:40a2af0caaef4cd6935c904c5e9e22f16b1697b7abf3084d18edea7780456a06
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:d5c41e1ffaaac0856661c457ec99680164e796613681e5b8353458b6a8e666d4