dhi.io/azul
Azul Platform Prime 11.x
11-jdk-prime, 11-jdk-prime-debian, 11-jdk-prime-debian13
sha256:beee595181177c4888d70df60d89b91b5806b1bcc116e005a9f0795133eaff11
Manifest digest:sha256:bd5eb92534b9d4be6ed2af6645ce7581c0289f43b171f4bbff6ed37af7e8ae35
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/azul:11-jdk-prime2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/azul:11-jdk-prime --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/azul@sha256:4b986edb2c604445bd55d2a112557a539faf8620691128d906ba3ea1bf486e8e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/azul@sha256:d00e5f235f8bdcecd67c58ed6a18d4fa168e56ed4d13a4da2c7c670c7035584b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/azul@sha256:bf6288faa9713ac73085b2dd53a2fb1665a01fc89cd3856da31e2a3a301316a5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/azul@sha256:46c8a63596743bbba48f9f1681432dc7e028ad6bb370ab6be170de96f9113124 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/azul@sha256:c8e358be5acd399f35a8f5cbe16f4d7f5a91411ce4f1ab4de18722f223061b74 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/azul@sha256:d98b2f2cd5b2876e2b8305903a72ad4a4d242518f97a8e880031137f97e0dd77 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/azul@sha256:c65decab0a9e9a6ff68269fdeba0b73250d75d70dbb20d0d732ee30c3953f3ae |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/azul@sha256:18e158abb167512a45697bf3f3df18187437507a3397bb9eeb6e0e4122f2eea7 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/azul@sha256:2a6dd6c90e6a6505d1aa4121508133a03d1a7e4badaa60968336b95b18db8bb5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/azul@sha256:d7e6d7da95ba1e9904b60669c8366079b3e3ac679778269ab7c544eaa2e07d93 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/azul@sha256:2783c9108f9701be61ec7c7490ac449d8389473b7aab0f8c8e020b8740a66672 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/azul@sha256:48bbd1dbaa880730ded9241dea607f23f622489829133b2711b55800c25fbb33 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/azul@sha256:6713877c81cf514704913602b2b9fc4e556613879b02c6d1b2697b77073f729c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/azul@sha256:b9d0e3bc8e2fc89b94db983a7dccea74fe893e02a847a906bad309476ba64823 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/azul@sha256:a35e9ff4a389425eb0841f709b3bb3272be0264b6587a505651882dc175f9a44 |