Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:aa4219d23750cdd91c1eceb38aead7000d2ab59cd3d27f198365a764919b769b

Manifest digest:

sha256:47362c8f44babc3f0244a6c1bd3b03bdbf0bbe3fa3148e7cc5d16f9cce44a665

Size

196.97 MB

Last pushed

15 hours ago

Vulnerabilities

0
0
1
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:82b5fb31748a2a3c2d94bdcb865f2669ff0a6de280a666f82c24a4e40992ae79
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:ec1322626e0782b9d04d9338934c5b910ec75334163c37ff08a93e6a4940290e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:a8ed261bd1212f827fd713e8d310aef0eb5bbbe83e02f9be6816a0ca4c416965
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:eb8df177b1703e9647ef209766e0f88db6b3e5df8b8ff61306b2ebc2620520f3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:b9a667830313e9c9fdd207b61e637ac521147027df7650af1bbf2ab73cff6568
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:7c87c7ecde74c9abf0cad580f7feac5453c02acbfcd7483debff8e05ca9088fa
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:7c5cc7707b41f48edd908cb07441e74881860d6fb17d6aa818fc3a7f9c395253
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:1c5d2a1ff13100d50a14028cd773980e8398895bfdf4bf9c9ad6df5fcf82298c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:7c7567c91a64b3a1496fe81c7cdcfb26e8b6111f693db57fdf6e4fa917685953
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:bea7a433d7650efd0bcdc561022dc2f34918404bde90a8667a059a531f0b564b
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:b574d96b5fb1de6fc72a516a27f5810b4eea7a524f0ef7554859733c77026c9c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:e44cc77bcaaa84ef5552f159462160eb1e4d1fed7e1a7ac002274993084e8604
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:fd25ed6e599a22a1ce73e4b93f0f9f8765b7b88b032d024781c35fc606078431
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:8612a2ed2ecd8be0a2acb855bba965d1fd75541b532b482a2afa710c78423a97
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:7c34ea6ff1f1c617bac5488ae1fbe2339317dcdaf6dc37d9ad7613649a925be3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:c7ad65a71d5d44cc677c5a15cc525290bfcd0921c9941c9549c6a0550b96baf8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:118b4817870ef2ea903048a006d620e75d4fc869d9f76529f53ae8b270746ebf