Sign inSign up
Eclipse Temurin

dhi.io/eclipse-temurin

Eclipse Temurin 27.x JRE (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

27-debian-fips, 27-debian13-fips, 27-fips, 27.0-debian-fips, 27.0-debian13-fips, 27.0-fips, 27.0.1.0.2-debian-fips, 27.0.1.0.2-debian13-fips, 27.0.1.0.2-fips

Index digest:

sha256:996a964dba91cfc63919154fb9a92467927a223432bbdcb78d5adea5437e820e

Manifest digest:

sha256:dc34fb041e4026fa9ee6cd61c82c2be2ba5efdd2dc6048a0a3fe88ebba0f33b9

Size

71.84 MB

Last pushed

4 days ago

Vulnerabilities

0
0
0
0
5

Support

Active until Mar 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eclipse-temurin:27-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eclipse-temurin:27-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eclipse-temurin@sha256:8955292e9d27b638242338c18d9dc05f35ecb9d3f24dd05dc21279f8a69ac5dc
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eclipse-temurin@sha256:8df902ae1176e46ea131602b85bd0e7d717a924b722e79eb3adb04bbee13fc62
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eclipse-temurin@sha256:ad844fcff67e300a141fe80de5e480e9c8a35c65a8dbf6acd79d77e59fdb1aab
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eclipse-temurin@sha256:f887e0f0087d7c7b5637d44575dd5264844f705e4bbff313cc041757aa5d676f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eclipse-temurin@sha256:a468a3d0f7f502d81e470b71939291033b2dc900073703ea033bff928b5d5af6
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eclipse-temurin@sha256:e25d66213df628810138459dafdab714dd419c5e021111390f9e5233ebae85b4
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eclipse-temurin@sha256:e2fd20e4709517af9e9f02546266f24849659abffc724199b46aebf7d8aa5900
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eclipse-temurin@sha256:584391c5277d122380ab52b2ebbf7e815fdef23181e35e9412212d72133bc624
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eclipse-temurin@sha256:2de3e72f8e3ee79692923282c3c8660017d9621e2a611ccefc9a00abf70ab9df
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eclipse-temurin@sha256:335402f435141e7ed659c1307d64fd2e1c59184bf00bda478f6a09b77b02daa7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eclipse-temurin@sha256:6131528ed0690a1d4ab46ab427f5345bc54524ef410a63bd8a473ff59d624953
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eclipse-temurin@sha256:af45496be0bf725b43c8516ef6e94a25198c563952af4bae9bc8d91235fac731
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eclipse-temurin@sha256:aae7d14b4a1c131f328100b1c1bcff7a4696d561cfaf8916be4fd3f7f9226173
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eclipse-temurin@sha256:bc16d03af46b53eb6d0102eab7d4d1e150d1557e707921a1c2bf53691a73817d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eclipse-temurin@sha256:dfe902906e1d4c88f82150ab20b7f7a768471f58358887193a8279f43e25438c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eclipse-temurin@sha256:ce5d9d4f890a9c3ad6acfb0cba78eb32fa78696dc1cc5cb99041c22dbfad16b1
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eclipse-temurin@sha256:9a76acc8a2745fd605fe623326e83b0b78d120eda42a35f59846fab28bd818f1