Sign inSign up
Eclipse Temurin

dhi.io/eclipse-temurin

Eclipse Temurin 21.x JRE (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

21-debian-fips, 21-debian13-fips, 21-fips, 21.0-debian-fips, 21.0-debian13-fips, 21.0-fips, 21.0.13-debian-fips, 21.0.13-debian13-fips, 21.0.13-fips, 21.0.13.9-debian-fips, 21.0.13.9-debian13-fips, 21.0.13.9-fips

Index digest:

sha256:d12462c5bf8e7acbb06f1a32ce880ddbd94f0218dba7ab08b4a0dabca2723647

Manifest digest:

sha256:f59c3dd938b0caa7d113c003a464e2f674e68c1e8cff45f375f91ff253e49d30

Size

63.21 MB

Last pushed

4 days ago

Vulnerabilities

0
0
0
0
5

Support

Active until Dec 2029

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eclipse-temurin:21-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eclipse-temurin:21-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eclipse-temurin@sha256:1f65d4743e0c86194c4647cc578d3a1cc452e5decda0c8a33ca6d7a413cc19fe
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eclipse-temurin@sha256:144db62fa17864922e3dd046d83d3597bdd8354c795413e7d90a325a5eb79a1d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eclipse-temurin@sha256:1eeb691e861bc8863f6ebc1f23134d81010019209abf782809f7f92247d1a08a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eclipse-temurin@sha256:928524c665ab9c661faf05a5db38716de5932a90b021ae30c90e4631d54bcd54
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eclipse-temurin@sha256:c762afe76d23dd1171a231cffda7e78f15bde63e5c225d3f81adf222fa4944cd
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eclipse-temurin@sha256:cd94485a41b24d531443bd2f340628b1d9e57cf4d7cf5df248b95a3c49267a9c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eclipse-temurin@sha256:37d6fab9a1e9d19404c237ffb838ba5273b71fb7c91826d74f28c192f3bb383e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eclipse-temurin@sha256:fa23a7bee15869828d3549ebb01701fec022aaf4e93f4b3dd95d71a8a41eb28b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eclipse-temurin@sha256:938ba55867180c635482caf703f0cbed9723cb339b188d4e2b48f62fa70d5ab8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eclipse-temurin@sha256:2af73d39c0ee09ec0177c572a34dfdeef97aee6d2a9d7e9241e5360aaa4decc3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eclipse-temurin@sha256:b34bf660b55c2cc03a3b37de2c3e26b2c08f5548d64ea9004e210b707447db78
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eclipse-temurin@sha256:a6cf6fe77f08dcec8c9706e207f7183426e177b7fce25d76e55d87ba6fad2b7d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eclipse-temurin@sha256:d9894395c6eab47a931a46f13111f1dee0c4123ec16eb76e631c5ad849fc12ef
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eclipse-temurin@sha256:61a759b0a614b9e2c761fbee0c0a62d2be439b1e7a0610d08a3213914e316ab1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eclipse-temurin@sha256:529939d0e90f6088f77e174b1b5747189064c65f02f4486a151157351990307c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eclipse-temurin@sha256:31028193a25629f01deb598dd069172868c7cbbff9d364b691ffff198a39ebfd
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eclipse-temurin@sha256:5987ec60bc49bdba4d9d3ae8fb40330b775eef70ffebd42e388412fe853362b4