Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:b363a8720837f65111f69645e8a6dd02d1a52b7bbedc1511b93cf3c920edeb68

Manifest digest:

sha256:cf094d7b3c8a69a22d784f6e11d32aa0b8ddf852fd26c1ff69f1e4b2c1d746ef

Size

196.62 MB

Last pushed

6 hours ago

Vulnerabilities

0
0
1
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:bea201da2315fa56b13aeb8ae3e8e6d2fe3a65cfc4e5e727e340540245bcee45
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:8f1773a624fe7f535ed34609730337b9001f3ed5259fe3bc7fc9c3b9587fff86
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:738450440933515b3de415977e4811b72a907da5c3a8b8ac0a58d7a3525d2a4d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:9d58781d99904160e3d67472621ccee8c8cb7eb29fdad9e7b3fd024d074a8ded
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:d487ac14876c8276109de6c097cbd76883e7b1ada20c957f368d616a45e0c8d3
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:17a45fd63bde8e349cab65561b3ad22d8d40483b146689761880c676399208ae
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:ec959095f6fe3b48de66f89b99726e35a0a8da4f2950c50b2ef30042e387bfe0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:5307cfc9680266f7e77f0e1ee57aea51796b15cbd45271f2b3f82183087ac19a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:533b07acf2e252c0ff5b68397ab444ddbaae7099b879fb460b7c51d705fb0a33
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:047ee6bfb0ddd56219a7c0e0d129e97ae48bef4895def93c8482b41a7da5efd4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:cfb4720e55ff01086fc9a19adee79337d1329dbd3047be91983e731743945e82
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:6f179a26361a2204763935ef9c8fe20e36e878aedbb78bf250dac29f5f1a2fe4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:1b892a28b03dbdeac9cf7bcbc60efea58ec552a0a15b40cf84ad3cdc7c41e651
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:c665ac4a932f618c60b1d104431a6371b9feb0b5c6fde8bf242f8f55f3debf34
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:5d1517c92efd5d9412a81e97398d0967f2726b8b7457f5b03d5128cd2dd5dde6
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:ab2d1f8d5b71b302b077da0280b97544c961ddd11f287da773608ea76361f04c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:a7a861793942d7e53564c1a80db910d5de85d303be60ff60810e82b4a02a4e9e