Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:18b9970f91863649ac778269b01280697130e3e11c0717aac975dff017e6336a

Manifest digest:

sha256:1d637b0801adb2bab310e779fea67e6da88b02b99daa86c337221aabe84025f5

Size

196.92 MB

Last pushed

7 hours ago

Vulnerabilities

0
3
3
27
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:a3c6e216fb2a79e74b77088c5b3d2cc7f2d22d34f0c1f15512f95a17a2ef9e63
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:729ccf96047cedfcec05ff673ab5878334c9170735bb6be52e81660961ca721e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:57d026dce92de3c9084c0e971f8a0dc982d4801037842d763ced3a5600c45d18
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:102e86e4c1f47f46c6b70162decf1697e74c944ea0feb096403a0d8c6a685427
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:8ed805cc457c8bc21bc721a89c7bdf62fc952964f26e413ae9b263970b6b6a0b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:35e2590a1f5bbce585de97cbeeede894c31ab9625eba7845d70e4ccbe262a5f3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:218efd3f9f2a08c0eae10b3acfebb6fb383197f5cbe8af81e2ed2f71ea21c697
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:15cd925c576383e27c3afb61068f61544b68a70c21e7d0fb335970c39d28cf46
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:6e7d283bbcbe3b1de541a45d013cdb07e039d28d74bd3e15f3d59713747a1c60
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:38d068f01b1958263306456753f21bf537fa17686c44f5150b6b837d03475c4a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:c7d03ae311ee4b19cfaa1b5882d05f54380f7cd6c303d7f6012c661b8d24bb30
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:0be27f7537778a475de90c1de10dae114df0fd009606a654d5b0c76a4620f96c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:cb15a213c1ff0f734e844782eca3f2f79a64ff3c73e9647d39caefc3861fda88
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:231d25ae0fc0d7e8575f0fe5d8441952812cf004cca3abff101377a062c457d7
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:ee8854773da9df8553fae71c8101c530dc6297946c04e72125f477ee48520579
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:c60f89395dcfa5bee8b1ba11ee0f9f615e3c1ef770d6a9282b3b4b854987c13a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:b606e9b1f42672924f9d72ff651cc54ba51124852eba5bf776e59536bea8e713