Sign inSign up
SapMachine

dhi.io/sapmachine

SapMachine 21.x JDK (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

21-jdk-debian-fips-dev, 21-jdk-debian13-fips-dev, 21-jdk-fips-dev, 21.0-jdk-debian-fips-dev, 21.0-jdk-debian13-fips-dev, 21.0-jdk-fips-dev, 21.0.13-jdk-debian-fips-dev, 21.0.13-jdk-debian13-fips-dev, 21.0.13-jdk-fips-dev

Index digest:

sha256:951f0414b1acee3c358830aea4613057a965db252d22790f45a3c5a4eadf3c4f

Manifest digest:

sha256:8a60daec8b95f71c56510cb9218313c3221df0d9eacb30ddad328737e12e230b

Size

169.75 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
0
8
0

Support

Active until Sep 2028

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/sapmachine:21-jdk-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/sapmachine:21-jdk-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/sapmachine@sha256:f6b7bad987137fba25e4b9c1ad90a116727d00c5fe0444fb52804a6436da0b41
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/sapmachine@sha256:83f4729e5b27adbaced613def68792077af3484378b2423567104dca6cda0d90
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/sapmachine@sha256:ff822656c06bcef3504c57be0f0422019aa8dd042ecc15528a3c28a0be8d6af8
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/sapmachine@sha256:d4bcb4c7bd40f0caf6e59d668cba51093666e27957832d6955f5069df1fd3497
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/sapmachine@sha256:2a871462d3dc417446c63fd3b9b870c926e21b1bbf24a663b43fc8af508eaece
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/sapmachine@sha256:ec4ffcfec662716da1371297448d3aecfa7a7fd6876b76b0bea365cb2a93e5fc
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/sapmachine@sha256:33e961f8f969b449775ecc925682ad7743aa3de9fc1e9df68abfe3b4c05e7688
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/sapmachine@sha256:e6ade009c57fac9e38764d93695a12490a270a4cd0c0db76983a665be0d15938
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/sapmachine@sha256:61a320e2360e17c26a19494c3d31a41d33f11cbd8429569731f2128bae673519
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/sapmachine@sha256:d0f6e88c86d1639024df7a6696c707c2fbaecb1e5b57796545383b2cb0a685c5
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/sapmachine@sha256:b9c0ecd1a130c9c723df78eba3f994e699008a9f730923fd875a368930433734
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/sapmachine@sha256:a915c170968ffc43686567b6d63e14195dc7dc3f4833e6c0a036f53a4e815a2b
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/sapmachine@sha256:fb2c1c4ace5230caef833e89b6aefa7cb7d0f13a7c5924687f9af879ebc20098
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/sapmachine@sha256:15bbdc968bd7ca8e4fb606594cf1d5e0f9db8f144c26c4ed64cb661371f694ab
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/sapmachine@sha256:0a631b9be4e9a57fc6de1fc33aed1a8774e0de1f18732c2af46c8ebad6707fad
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/sapmachine@sha256:466cfb5faa07c463a82cbc5f6f3153131b0c1a710dbf51d59538163dfb174e06
SPDX SBOMhttps://spdx.dev/Documentdhi.io/sapmachine@sha256:1711cdd1ce646bfe9e07d887d0faa211252bd64e158c6dfebf0efbaa6138658d