dhi.io/eclipse-temurin
Eclipse Temurin 26.x JRE
26, 26-debian, 26-debian13, 26.0, 26.0-debian, 26.0-debian13, 26.0.2.1, 26.0.2.1-debian, 26.0.2.1-debian13
sha256:4f2fcde2aa071184f220b3e52a7f4dd169370677baf8c0ec3e186bf98459fa13
Manifest digest:sha256:6b0401d7184a1259f5cc6e7e9be7c8a3982a9a495a0a7a9a197482f40a4705b1
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/eclipse-temurin:262. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/eclipse-temurin:26 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/eclipse-temurin@sha256:367063a9f0cd37ef2a7695d6c3318731c6cdfa2629feccdb0f3cbcc082ee3ed6 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/eclipse-temurin@sha256:2761fea1f3ba4f5b2a7114f4392038e3fd01cc10136373d44ad6cb64609f2a33 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/eclipse-temurin@sha256:86dd04d85ef22881af8999117efcaae8df05516d9f67838b6b5e9d8e55a2c782 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/eclipse-temurin@sha256:ef7b126413a7b84606d5f675c0ba3dd8a903214e1c3f19d59025a2fa368e4c58 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/eclipse-temurin@sha256:15e0ad184dc22c8efaf6eb43feb46f0b8e1ee8a100798d76e35adb94d1928b6d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/eclipse-temurin@sha256:0e7e96d13aba85da8ff84e65c83d9332dc16f8138f37fc3b0a3bf091de71e8eb |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/eclipse-temurin@sha256:7eca93940711557032dcee7297ac61ef5e9c87bd5b62ec4a1281d18d33d23625 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/eclipse-temurin@sha256:ec454cefd4aab4a6eb35273d5a93c6e9b754aaea39bd502f4e66b61258d2d98b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/eclipse-temurin@sha256:f293a1cce44a33de60ff6a63bd729e7687a80a769172002dcf499be99cf0f868 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/eclipse-temurin@sha256:31fcbd8880f8381d4aa8bb4c2a084e8107e9e7f875517e5b17586e12056d7a1c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/eclipse-temurin@sha256:653d7fffa99afe78d7f781dc0e1d13197efffa922df0c141fcee221f244fb9fa |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/eclipse-temurin@sha256:44eaae622c30224b7fbad006ddcfc8fbca8b95a4665858e715e9d0c666772e96 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/eclipse-temurin@sha256:ed9b50e3b46a85e5e7f4185b25bc7b331926a03310e2b4005c796252999b4a14 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/eclipse-temurin@sha256:cef9f504c2fae779409e5199b476b385a0696cec608eeb232d0c0eed6681a8e9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/eclipse-temurin@sha256:f23807e15d1eceb21aab644873847d41c3c04ecb858519764597e5d3def63193 |