Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:991ec29fd852047ba32cc2e5ea0d14021cb0ad8c88d3e08a0c56e309cc5055f7

Manifest digest:

sha256:68273e544da963cd79e2683f7daf13885117b77ee0c0df6645b12ea34da6232f

Size

196.63 MB

Last pushed

21 hours ago

Vulnerabilities

0
1
3
10
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:c3e28b07465c11091ef6cb8a244213c183e6d4f0d04e35c0e47df5c31c99fe9e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:029e1cc5ab5fbcdca1dc01bd0fdcf9e51675a19fe6e30d7deafbbf008edb4561
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:eb180827179a98c85c7b0d8bef89d0acb0192ec0a374e371a30bd4f4f5beb7ea
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:f87ce7c7a65d0f7b912f5d28c7181187b2a72c379e8c5886ffe400015c51f9ab
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:39c508d769fcd59e84108703aba1c3fcfd7720d7fbc388b8adcd60c88d80a243
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:d1a9ea62a6675382c6208493edf168d682d9069204f33ab9d97b9097db0dd24c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:e51505011387d6fc033a4a834faeef4d27557ceb7b60ec0bf36b7d5b40e7162f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:c0169e6b4da065ff4fd609e1971527a7b6427d1557e3b790032c59b118b53a1f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:641bdeda3194bd9cfe6919ba06e39c35a416f6678e1259c204408671ca44fe99
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:31af50bb6a8736d8ac31d8e8c8ad7396aa5c634ee333dcd08d2e9f56ecfb3d03
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:8e0c78ba9a90e33fe7b57a1d6ed99006dcf087024c04c39606deff10c9e386f1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:d0a9ac23cbb87fa4695c66a067ff8ab40ca0d0dcf7ce236d8c12ec5cc6878dbb
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:701791a130f241be8edadaca1f241094a4e2c9130d6b1ca8df3744d16344db64
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:3df499128f2a0afaa9e5d51b5a4de6b9c6bdcb1347622867c8092f482a654a58
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:9e63892d420cc5668f35d63b5fdc6fed9ff199505069f6446bcd2433d3f90c60
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:32c532298e8733b53b0a13dbae9e460d47d8d4e7e65aac406a3987e009a0f657
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:9f71f90c969291906cde41c10cd527e8eafebacaad97a1934c5c13ad53f3b1bc