Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:14a8d6384439713126ca5574dae41daabf55e31faef2caf162874fecdf28beb1

Manifest digest:

sha256:78d8d1085c60bd32ad52cc32bf5a47bc9b89b07b4f48ecd829a84fe54c2730f5

Size

196.97 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:595c291eae89e82cdcb6106b22675d21422fe49b0313415002b7caba9e547d55
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:21d6055b69d5040318bbc6457f2d7ff84293337d1dd016639617e1f7df356c87
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:5dc4662d8cd333830cebd291d9baac9bf5b461b1fde606b43dcf86695286055f
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:0311641241676e6178c2b1b719365ec5c5eb3c9a5f5cf4e323db1c0d90a61418
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:c75e85be9f0c5fbdb919cd8e8694bbf8a6eab5eafc7929b14384bd6d98805ced
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:221c04bc0622958d72ef083fbe22af1f0385cb02432e1e05cd4037bbdd3e1d6a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:f3f4b7ca864edb9829977827e0d0d82c581173dfb79a3be8c38f02b6515cf099
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:8f7c282bea9576d7ada6e45290a25d04f0df8a40c28a347953b8b74dc31d18e5
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:73ea4251d81cb9da9d1971da77a167be84fe53dac7c74823a81b1791cefc6855
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:52ceb867e4ede6ebbc9c84a1140444d78ac0b9b42ca58d7001c574b09435ce01
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:38f002774541b99fa562c1cefc79395f668cd83505e129abd74e270e7a134522
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:6a3d72c97b1cf3286844eac1f79309fe214bd8a5f730a490c022e5e7df360a51
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:0883d41aef5601b3b7e16517705dc7262ecdefbb6018cd5d3ba30d3540789339
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:bc7bff6ecc7c24446ea6ba6ec07ca222e01b5e369fd1cbe892ed05fa5bdc2c3a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:e3981e2bf0bb1cc6cd6aee6082a54233d7b9898081e87dadea9c83fd488df530
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:50c7a54a3c960f3795f7a9546339a42e9c3a17798f936ab7fc9bdcdc23cd38de
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:4327ce9749324be3c5aca8df083e10e123c98c6f46995b4316a744e63012a698