Sign inSign up
Eclipse Temurin

dhi.io/eclipse-temurin

Eclipse Temurin 8.x JRE (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

8-debian-fips, 8-debian13-fips, 8-fips, 8u512-debian-fips, 8u512-debian13-fips, 8u512-fips, 8u512.b09-debian-fips, 8u512.b09-debian13-fips, 8u512.b09-fips

Index digest:

sha256:de52df709a4d5a96e8755e85cc6acac0350bd679ef576dc33d50fff36384d8d2

Manifest digest:

sha256:947631c19d197bfa8a8de7df6d221d923e8480a850c0915c48824bb732561598

Size

57.88 MB

Last pushed

3 days ago

Vulnerabilities

0
0
0
0
5

Support

Active until Dec 2030

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/eclipse-temurin:8-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/eclipse-temurin:8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/eclipse-temurin@sha256:2ccb79e61ec52d2b624c46211f27d10d553f1566b8db5313441f71eeced3aac6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/eclipse-temurin@sha256:96d1d6d84091458ec43cdcf3402ebd702e3c92d8e8c9abe05cc4db9526a9dae6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/eclipse-temurin@sha256:d8f06ec8203ff2c65349d9d0c47e97cbbefc0811d601eb53c2881b096a9e800e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/eclipse-temurin@sha256:fee0345d3d3eb7ad2fc65792ed530a617bf5d51a38b87d074dab293d9efbdfcf
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/eclipse-temurin@sha256:9d651acdec450b51aded2d29b47e2aa8eb23aa5d1fead5e8605b7f29539c2bd0
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/eclipse-temurin@sha256:f95284061c85823f25618d22cd990ee5ff5f1838baf9d58b3a9e7e9b5de01469
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/eclipse-temurin@sha256:5489161062507e1664b7f8618f49221ab1644b86fdb442cb0018057b3fe52f7b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/eclipse-temurin@sha256:98b747afca3c7c0be8e96cdb0a5fa436d9e26da7fe046da9379d38d15b3f84e6
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/eclipse-temurin@sha256:8e300ea92cf4878eb451d10b507c4b92938daf55d310fa2fc68144eeb1b26ab8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/eclipse-temurin@sha256:0d0b0b99a706a3cade1b475635aa7573e5e2c878c2cb16d51fab8bc18c838100
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/eclipse-temurin@sha256:e3b9f56ee1b108fb9b1ff9de831880d6a9e5ec95886a1e13be0265af3baf8d53
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/eclipse-temurin@sha256:2c8c4fcb4435fc681a891fdf8fa0dca5d384519a486176459fa242dc694398c2
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/eclipse-temurin@sha256:5fa666d8cb54b4d41463254c1c335dd2dbb35e255d26cd0e708dea63fb9632a3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/eclipse-temurin@sha256:234b2b7a274c96edd4d2d8e00265370bd14f7a7866cece0a3107cc13ce30fcb6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/eclipse-temurin@sha256:4736d341a34947f7aaa53250315cdbbd2bd369a9745008e9bcbfb41e04dfc21d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/eclipse-temurin@sha256:55faacccda2f6dd91ed5177ab20933d047a097aabfd4f8c41d62312967c3ad2c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/eclipse-temurin@sha256:334d37bdce8c5eebcfae2cc326a465abfc4fea12ab88033db110bc986380dedf