Sign inSign up
Harbor Exporter

dhi.io/harbor-exporter

Harbor Exporter 2.15.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.15-debian-fips-dev, 2.15-debian13-fips-dev, 2.15-fips-dev, 2.15.4-debian-fips-dev, 2.15.4-debian13-fips-dev, 2.15.4-fips-dev

Index digest:

sha256:f41fd9e00ad76736b3edd30c37bd3bee8dbcf936a700c42878518bcb05ca5052

Manifest digest:

sha256:4a23e6c64b31d61a8eebdc5556b0347019114cf1f23fd9a024a984cdd8c70ca3

Size

43.28 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-exporter:2.15-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-exporter:2.15-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-exporter@sha256:a11c6173bef109198b02c67b4dc2da83eeb9cf2f74091e4876955b14313fdaf0
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-exporter@sha256:b538945234428a14212907512ea901e1a35a8cf34417259da693509e22d4ef68
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-exporter@sha256:4f93d0c6178ea7a86e01f819f05a9411912bfc28d2f7d3807ecc67fc842d71b1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-exporter@sha256:fa762567a15a7368d0564f3d32160f207bc0c316e486768069f9ae6163e41477
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-exporter@sha256:4e704abbf3d970a719297b6e4842a64634f4925264e525701f674cb4a876a318
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-exporter@sha256:2b34773628ece82fc83dc0d00cb95f2c030f49ce3c5396fac0d3de6422a78848
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-exporter@sha256:f1787687fdb330100218c30fbaf46858f43058951b75826464cb3fe10d8f0e35
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-exporter@sha256:850f6447df338844d4c2cf2f7f9cb591ecd2423248843805d00f026892bdc84b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-exporter@sha256:32283bd23a316dd16b638ed8d51d1fa405697a7a5a77cdab70f9f512a767a5fd
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-exporter@sha256:38f75adc4bbbb470fc2ff9ae22c9b48b4e921ca408468a40e55d0c6269dee788
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-exporter@sha256:25a343de33bf2eba67e7d1c92858aba97ad7c5cdcc46c0a4bb25d30c507d4a51
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-exporter@sha256:c1b952e2471524be2474f80a64c358e07dadcf34e73d0edba884e8858cbed174
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-exporter@sha256:69c4d9d4764913d192765f158b1b2bd3df20a40550305a1a76c82c1fbded8e4f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-exporter@sha256:f099b48d4e24d2afb59388e07b41080bf62ce6e6dc67821521d139c101654f0e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-exporter@sha256:3a3ab9dbcb0a341b91eb205393d3a7f28a33fd5fc1aa8dd126093e061afae6e6
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-exporter@sha256:330f9b2f29bd5129a9211465f9dbf009beffd985addbdf14729b421758e5777f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-exporter@sha256:ddfa49cc2c117ac6062f161eaf3bf3b1cb8d715f6fcdb288855e47342efb1aff