Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.4-debian-php8.5-fpm-fips, 34.0.4-debian13-php8.5-fpm-fips, 34.0.4-php8.5-fpm-fips

Index digest:

sha256:ba80fbfb1356a00c9a7053df942b3c66d7036e494668e3e96f85b2b97e5e6179

Manifest digest:

sha256:7327abd747135d466307ae2b929a38789f7f7488d25f5735b502ef3d74eee6a4

Size

272.65 MB

Last pushed

21 hours ago

Vulnerabilities

0
0
1
18
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:7ce55d0c48ec28132e8c810db6ceeb185958e989a9c251106c02eec22ba9f772
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:7e44e9682ba6c620c28fc6a424d84c58f48cf763c4cff62ebf7fb436746c2a65
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/nextcloud@sha256:39b13345c799b1fb34db091ebc785ed8092921d81de3b39542dea9c70615130f
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:25c04fe31d43d3af85dd7232e3ea5234828bd76834b36c3c03ee04acdc292c79
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/nextcloud@sha256:703d08b168012c8a9f5d077795a8a78b66be0524c0769cc3a700ceb4ba95fc35
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:18150e43130e00a26f8db8b23f33e349c635f6e4a8b919a8e2f2c877af3f53de
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:e221f77875754d0d366aabdd6f6032d2b10dccac56fb6349228548481e86f5f0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:0b668c9b73a205e8aa3561b5e715d364d1b3117f186467c5a96f78f6c621b65f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:05baba2c84f60a56aeab592a692cb3ba7dfcd17fdc645e64dfffa07276887710
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:ff508c143ca602980e02370c5a9dfe70ef041457b1463ab5f753a5600103341f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:fd25e93d2639b12ad891f6c36ec4aa24931fc415fbd269d852e0814e540748ad
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:53a3c74a54027e511b629448224e3424fb378bc4777b410f87231dbdbc47d9dc
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:b5581fb57b4c957fa56bddf1d1c3647e0b3f6f904a4337b3ac4c2b1d96331b21
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:d92b3e0b293b0e880c1abe5a08980e8304b68975036ee4740f4e82a708e31e7e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:3cd06b18c398b42b359b5b032780f25e5e125c42ecba31e2365c953a2df9d217
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:b1451b389216691ad6594d4af88b6467ab2211b785d802842ca116e9651f52ab
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:d684e80556ec16291d24de4b9ad0baa1e169cf1aa33a9fb54588a9a7d7d92c5a