Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.5-debian-php8.5-fpm-fips, 34.0.5-debian13-php8.5-fpm-fips, 34.0.5-php8.5-fpm-fips

Index digest:

sha256:f318949d9f1b22f3919b13f6fa4091b6dee94df3c59e048dd3052ea4482fd9e3

Manifest digest:

sha256:de32a5fec452fe773e075128d566c3a87c5f073bad99e1cebb0e0d4ef8439b07

Size

274.03 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
2
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:11684cf84eac79562ce63889e09b1481834e08ffefb8de2be5f4b71cf89d38d6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:052fb192d5176e11b7cf49b007d7c41dc6a1530dad174c0477dd1baa9ecaaaee
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nextcloud@sha256:9c467b193a38886cb942034cd973f4782e545d479ea2b8022fc4cf666fe2c298
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:ae66f63a76f5fdc580e84a59d13b66fafdb14a032a128428b390d477fc3c9f75
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nextcloud@sha256:8e06943b74da0db50883df77f544194e2c7eba764f5b4924709e337a07651902
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:eaf3b0dac6fd4f539f6cef06c68ffadab72121dbd6c7a504029123cda37f8ce9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:60d8744e2b51582289481e7c14715ed3b395b87b8b92879cf1eecc229492e1af
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:504bfe2944cabf492d1243a6588a64ae617fc52a093f62000a3cc43cb682cd97
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:0883880c119c3dd8153660799e0890ceec9396f9772741adde3fa69427d29d20
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:8769a6b8d8b7cb78182116701c8545ed138afea8581356b5d013e1486fa01fb1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:87c02132aef60abff65a678c2234d247614c754a26d9a4cb1a1d98e01826ede7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:846025ef4a9edd8e13a403d1812700eae428bd8f2b549b63ec097e5ed5946c2e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:1fbd12c3c1d2cdba34b70f6280bbbb04b45c908cc69022bcf0afedbb23157769
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:65bcaaafc05b79c28a581ffdc4a662c5660fbdb37d9906c133584c0fabe1ce96
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:f3ed44aeb38bc811f769baa7f10b59d6fd1f6c7eff83becdf4b4398ce3530d44
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:327bebb17f25045f0d43f9944ba416b8471bddaf8921545f272841138df4011e
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:b14f40f27810793cfd5d32318ab21b129bd26744bc938ad6c0f50801194c7ccc