dhi.io/clojure
1-debian-lein-fips-dev, 1-debian13-lein-fips-dev, 1-lein-fips-dev, 1.12-debian-lein-fips-dev, 1.12-debian13-lein-fips-dev, 1.12-lein-fips-dev, 1.12.6-debian-lein-fips-dev, 1.12.6-debian13-lein-fips-dev, 1.12.6-lein-fips-dev
sha256:9a168e5af30fd13acb84fb4b1f63f8cb3d3c94e9d986897b37c17beba8a1a977
Manifest digest:sha256:c32bef8a8dc42ac41dc711608d7b275ff2235e0e2827a03499d7b894b810e60f
Size
214.60 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/clojure:1-debian-lein-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/clojure:1-debian-lein-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/clojure@sha256:f5605abde4f1e16fe9887676c3516705949e3fa058e6f48e60f1b991b74c6459 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/clojure@sha256:eaa15e923873119b0f245fb9fd8325df6da34f637774dfd641e8422ec2f4b8f1 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/clojure@sha256:81cab602cfee26bd45f48b28cd241b34a841a14fbd72abc3032f4267c5c8183c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/clojure@sha256:856dd89354b79407a45e18e065b4026b0de3847a674b535748971714734f5dc7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/clojure@sha256:d31a3b0c71220cf10a8626f071c156a256be7081b2cbee5ee84b171ec21df403 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/clojure@sha256:677c99c90b2c0eb8db5a887c49f5588f099204eeffc5737064bcb2cc351a79ce |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/clojure@sha256:7d2a3e890a7eea25f1972168785e619a4d0e934ac6ab1f6b7cf522ea2816f191 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/clojure@sha256:cf82aa6c4f65315a222e6d835f2a9ca9744ff093a78d6337d0af7d06466beb1c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/clojure@sha256:797f6dd77efe174a96fe339f61415d6451da4ba32f77da8660b06a9384fff01d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/clojure@sha256:c22ba0ce2b1547fee8f3354695cff7785f57243d8861d4172a2afa3714b221a4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/clojure@sha256:59bdf39b87f4d1d5920f1becc0439fc8a3e19e180c7c24ef59636f940a2b19d4 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/clojure@sha256:2c94b97415de3413ec38086c9886b8895378876c26e6798c36d251019d3286db |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/clojure@sha256:b4770b7735a6d75f0f2c06eec97f033373d30dbd4cc8aa6d95b89e103d36a442 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/clojure@sha256:6b3aeb1908d61bd2a069cdd4472497104fbef7917451e058f76e34cbee764956 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/clojure@sha256:84928dbe77a09d148af051f610bac21a3606e4c560d0bb0743842d3031fa94da |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/clojure@sha256:54f11c6e7e2070fdafc3977047df101471f4a4aaa3c0745503cf02189c4700a2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/clojure@sha256:fccacb4953741bda8a3d4efbda80d1b1bff72aec25770502f7bbc7f234442323 |