Sign inSign up
Eclipse Temurin

dhi.io/eclipse-temurin

Eclipse Temurin 21.x JRE (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

21-debian-fips, 21-debian13-fips, 21-fips, 21.0-debian-fips, 21.0-debian13-fips, 21.0-fips, 21.0.12.1-debian-fips, 21.0.12.1-debian13-fips, 21.0.12.1-fips

Index digest:

sha256:010e70e55046fa8b7b255b4f3b18499b93912e499e1cc6165b5b93de9393b1eb

Manifest digest:

sha256:089c3c10268f4d7bdfc092d27c3a9c924c9811f779cf58d09ce23f5f03268382

Size

63.14 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
0
0

Support

Active until Dec 2029

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eclipse-temurin:21-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eclipse-temurin:21-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eclipse-temurin@sha256:c2772742f25608442e376783148218e3384fed9d22b1917df898473dfe57d336
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eclipse-temurin@sha256:2907509c68ed4f1e7db3f9ca7fcbfa060183ce728516371479020af1180ea78c
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eclipse-temurin@sha256:5aaac68c84aaffe8a78005836722f5d118b9441c77f86e4f5cff5b738ab20851
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eclipse-temurin@sha256:f6948842e8a62dd8d2a5cc824f7b6b51681e464140a350693c42faa084145465
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eclipse-temurin@sha256:ceab5975b0fd329bbbf70571d1ac79b2437f900d2c071f20954d20914f7ee9c3
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eclipse-temurin@sha256:a3dce637450e757e0f85e65c54f2d805fbfcd6b7516866d0868416bcb28d74dc
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eclipse-temurin@sha256:a81d83148acdaef65ed48dddbff0669149583b7d187c8118dbcbc1d1d8abe978
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eclipse-temurin@sha256:47dc38401f4ceabc43a52662d72df6a8e48a0e1e0a663d0ea72e883ae7aa7cac
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eclipse-temurin@sha256:06df32ac9ab8a1b8acf75f44786d4e4701ec2ea6d803a0bec104fac38a89122e
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eclipse-temurin@sha256:bc58344e58b93af784a5e3e0453ad6881252513956fe9837c80569fcc8fc20bb
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eclipse-temurin@sha256:1cdd8d3455d280a71a0de0728bdfc9d2d192099969a75ae8e4831872afea6ebd
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eclipse-temurin@sha256:84b9f0ae86e9f33133ff9b1ef45dbc9f57267576f98a15c785c18b38f4702c82
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eclipse-temurin@sha256:3a5bc745c67fd4ed1c41f162451c82478489ec437c770759a16de60a485956a8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eclipse-temurin@sha256:77f4bc40e4c2ec0144175a93b436e5a1e87200eed19bbe1d29a74436ac409ea6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eclipse-temurin@sha256:8502873a517cdce3166e076693b7a76dd4222af078fe760836bfd8ba18bf8332
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eclipse-temurin@sha256:c6ade31f97848aa232b202ced6639903159a9f15c01f7021739529dcea5283fc
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eclipse-temurin@sha256:e5f30c3c5e1d106dd679797b43e5efec067ce23d031168589952b86faafae636