Sign inSign up
Elixir

dhi.io/elixir

Elixir 1.19.x

CIS
linux/amd64
debian 13
Tags:

1.19, 1.19-debian, 1.19-debian13, 1.19.7, 1.19.7-debian, 1.19.7-debian13

Index digest:

sha256:f8e446fa09dc96d53b43f19b6f4bcafb3e72507c36ed83f7a2613a9f536b2a2e

Manifest digest:

sha256:a65ba7b13c1176b8babc85c47194ddae90c22684b88f3a2947f707f8fcf73b0b

Size

93.48 MB

Last pushed

19 minutes ago

Vulnerabilities

0
0
0
4
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/elixir:1.19

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/elixir:1.19 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/elixir@sha256:fa7b8476f1786873f2211d0698b2ff7fc392b3d93dccdb4f025f268ad0c12e68
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/elixir@sha256:b3c72ad5170c8546197bb449d7a30ac9a913473c923fc014da710b398a7079f1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/elixir@sha256:419acdce51f365e01a2d5764d336be13212d5de67dd4769f64d84696fad17d50
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/elixir@sha256:fec6f2d6b26bc711e83c2dd52f91914452dc4405647c618382e770a5cb1cde32
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/elixir@sha256:48c6f0e2fa8940c17545f83627bcb34c69b2801948eb13fd98207c29568ddf88
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/elixir@sha256:216df7663d02a1ada1965dd60c04bb520a33e0e72422298a6225a666a02d1b4f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/elixir@sha256:3aa6975b96d50fb4f661b34ee8113de1701a68eaf0d9bb4779fa930dd44658f1
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/elixir@sha256:008aa6f261be0543322d670b67d6e6f84209698b0e582d4021f2fa165f77ee47
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/elixir@sha256:b873c44ecc49d4efe9b7fc96f10b557075532557ade024ca4b283e474211e203
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/elixir@sha256:d2903ba96c2a2ae4fc27e3c6be14a7af1ab9679186075bfb57ea091b5aaf3da7
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/elixir@sha256:71c7c97d154ac96b26687436ddd1142f7c71efe323957a9abbca7545489540be
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/elixir@sha256:8c531822db683208a4467dd51ff193d8312e6b7791cd45cd0367644477c620ea
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/elixir@sha256:88c994dac6a7396179d79189b28e6e6dad60971a631ed2209b379689cc1cdf19
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/elixir@sha256:61e1ca08d4733a2353098d07b3f8034275984fa62856534b5848b2b24df53dff
SPDX SBOMhttps://spdx.dev/Documentdhi.io/elixir@sha256:a1ff0d76d66d2089b5d6366c1cc38503d014c3c4080331232b71bbb7c28f1589