Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (lein, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-lein-fips-dev, 1-debian13-lein-fips-dev, 1-lein-fips-dev, 1.12-debian-lein-fips-dev, 1.12-debian13-lein-fips-dev, 1.12-lein-fips-dev, 1.12.6-debian-lein-fips-dev, 1.12.6-debian13-lein-fips-dev, 1.12.6-lein-fips-dev

Index digest:

sha256:9a168e5af30fd13acb84fb4b1f63f8cb3d3c94e9d986897b37c17beba8a1a977

Manifest digest:

sha256:c32bef8a8dc42ac41dc711608d7b275ff2235e0e2827a03499d7b894b810e60f

Size

214.60 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-lein-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-lein-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:f5605abde4f1e16fe9887676c3516705949e3fa058e6f48e60f1b991b74c6459
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:eaa15e923873119b0f245fb9fd8325df6da34f637774dfd641e8422ec2f4b8f1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:81cab602cfee26bd45f48b28cd241b34a841a14fbd72abc3032f4267c5c8183c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:856dd89354b79407a45e18e065b4026b0de3847a674b535748971714734f5dc7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:d31a3b0c71220cf10a8626f071c156a256be7081b2cbee5ee84b171ec21df403
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:677c99c90b2c0eb8db5a887c49f5588f099204eeffc5737064bcb2cc351a79ce
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:7d2a3e890a7eea25f1972168785e619a4d0e934ac6ab1f6b7cf522ea2816f191
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:cf82aa6c4f65315a222e6d835f2a9ca9744ff093a78d6337d0af7d06466beb1c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:797f6dd77efe174a96fe339f61415d6451da4ba32f77da8660b06a9384fff01d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:c22ba0ce2b1547fee8f3354695cff7785f57243d8861d4172a2afa3714b221a4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:59bdf39b87f4d1d5920f1becc0439fc8a3e19e180c7c24ef59636f940a2b19d4
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:2c94b97415de3413ec38086c9886b8895378876c26e6798c36d251019d3286db
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:b4770b7735a6d75f0f2c06eec97f033373d30dbd4cc8aa6d95b89e103d36a442
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:6b3aeb1908d61bd2a069cdd4472497104fbef7917451e058f76e34cbee764956
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:84928dbe77a09d148af051f610bac21a3606e4c560d0bb0743842d3031fa94da
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:54f11c6e7e2070fdafc3977047df101471f4a4aaa3c0745503cf02189c4700a2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:fccacb4953741bda8a3d4efbda80d1b1bff72aec25770502f7bbc7f234442323