dhi.io/nextcloud
34-debian-php8.5-fpm-fips-dev, 34-debian13-php8.5-fpm-fips-dev, 34-php8.5-fpm-fips-dev, 34.0-debian-php8.5-fpm-fips-dev, 34.0-debian13-php8.5-fpm-fips-dev, 34.0-php8.5-fpm-fips-dev, 34.0.5-debian-php8.5-fpm-fips-dev, 34.0.5-debian13-php8.5-fpm-fips-dev, 34.0.5-php8.5-fpm-fips-dev
sha256:2b61c15f4a5c1c5a0f3737424ea16257bc212d65ba4682d64f137d606bc46784
Manifest digest:sha256:a7f0111814da9ed075ff228d4ceb032f3ea3169f266835e66cc89e6ce9df578b
Size
280.24 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/nextcloud@sha256:ba28432bba844d764239bcb600e7d7d79a7b74fc2bba64063a2758d07590d8fd |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/nextcloud@sha256:d878d55a99e48ea2ae3b4459140b6b3d4c721fb9b688ce6c95869eb417e5dc3f |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/nextcloud@sha256:53203d901ed0dbc1d2436edc394ee7b64661198ba038220aa067676cd614fcef |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/nextcloud@sha256:3d64d7b88852eacddd208a2d7def757513783f48175ef7a2bcd231678fc6ebc1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/nextcloud@sha256:29c21c076db18d5b6eb39aab519b0158a715ef15e7e33ca37fc273d850965786 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/nextcloud@sha256:325f8a142201d4e6be77f8bb28438d243e0fd99c38eaceac38993671c84e91fe |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/nextcloud@sha256:8dced9fd1ad258fd237414de2a1f3291b0e343e45a13e36f1148f38ffdcb2536 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/nextcloud@sha256:f86419e70988da8bf2ef761fa46ec238668895e375c4522b5a76e2df113d36b3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/nextcloud@sha256:607e726d43bcb6a9b73391513142bac2879ae26cc21c7d5bafd0643a38237af7 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/nextcloud@sha256:6e20e6ef4a2f0c557b5efc2ecccc297187fb6c7561483cd88ae60f24c0d62468 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/nextcloud@sha256:feac7188c1929e4b7a4d4ae5c47fe6526d749ee555dfd6b5ac42eca7926aa790 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/nextcloud@sha256:e89ae1c01b1875c6ca6fc5480c7e9b40041208eb96b2616b2cc57a6046a7eba4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/nextcloud@sha256:e92c37b23bc34b3465bce17c47a8cd4aad06a5f5e855fac3a282aadb09aa55ff |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/nextcloud@sha256:5e715582b3cb081d4344132cb4417d0a5bb88238570530ab4eaae3fb09846f40 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/nextcloud@sha256:4e23019d86dd19cc4bd90668fdf134bdce16e4bff26d7b729c18a4edd0e3f4dd |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/nextcloud@sha256:bf96a0c7d2001c0ed3006a9ba5635ab257daebbedfd108cd0f441401af327768 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/nextcloud@sha256:fb1a6558a608f0bba96fdda1a0ec2167c9124b4ec776a3aa186bb947cb626d43 |