dhi.io/nextcloud
34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.5-debian-php8.5-fpm-fips, 34.0.5-debian13-php8.5-fpm-fips, 34.0.5-php8.5-fpm-fips
sha256:f318949d9f1b22f3919b13f6fa4091b6dee94df3c59e048dd3052ea4482fd9e3
Manifest digest:sha256:de32a5fec452fe773e075128d566c3a87c5f073bad99e1cebb0e0d4ef8439b07
Size
274.03 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/nextcloud@sha256:11684cf84eac79562ce63889e09b1481834e08ffefb8de2be5f4b71cf89d38d6 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/nextcloud@sha256:052fb192d5176e11b7cf49b007d7c41dc6a1530dad174c0477dd1baa9ecaaaee |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/nextcloud@sha256:9c467b193a38886cb942034cd973f4782e545d479ea2b8022fc4cf666fe2c298 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/nextcloud@sha256:ae66f63a76f5fdc580e84a59d13b66fafdb14a032a128428b390d477fc3c9f75 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/nextcloud@sha256:8e06943b74da0db50883df77f544194e2c7eba764f5b4924709e337a07651902 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/nextcloud@sha256:eaf3b0dac6fd4f539f6cef06c68ffadab72121dbd6c7a504029123cda37f8ce9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/nextcloud@sha256:60d8744e2b51582289481e7c14715ed3b395b87b8b92879cf1eecc229492e1af |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/nextcloud@sha256:504bfe2944cabf492d1243a6588a64ae617fc52a093f62000a3cc43cb682cd97 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/nextcloud@sha256:0883880c119c3dd8153660799e0890ceec9396f9772741adde3fa69427d29d20 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/nextcloud@sha256:8769a6b8d8b7cb78182116701c8545ed138afea8581356b5d013e1486fa01fb1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/nextcloud@sha256:87c02132aef60abff65a678c2234d247614c754a26d9a4cb1a1d98e01826ede7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/nextcloud@sha256:846025ef4a9edd8e13a403d1812700eae428bd8f2b549b63ec097e5ed5946c2e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/nextcloud@sha256:1fbd12c3c1d2cdba34b70f6280bbbb04b45c908cc69022bcf0afedbb23157769 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/nextcloud@sha256:65bcaaafc05b79c28a581ffdc4a662c5660fbdb37d9906c133584c0fabe1ce96 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/nextcloud@sha256:f3ed44aeb38bc811f769baa7f10b59d6fd1f6c7eff83becdf4b4398ce3530d44 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/nextcloud@sha256:327bebb17f25045f0d43f9944ba416b8471bddaf8921545f272841138df4011e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/nextcloud@sha256:b14f40f27810793cfd5d32318ab21b129bd26744bc938ad6c0f50801194c7ccc |