Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, dev)

CIS
linux/arm64
debian 13
Tags:

34-debian-php8.5-fpm-dev, 34-debian13-php8.5-fpm-dev, 34-php8.5-fpm-dev, 34.0-debian-php8.5-fpm-dev, 34.0-debian13-php8.5-fpm-dev, 34.0-php8.5-fpm-dev, 34.0.5-debian-php8.5-fpm-dev, 34.0.5-debian13-php8.5-fpm-dev, 34.0.5-php8.5-fpm-dev

Index digest:

sha256:98b0ab442c43f44797f258a85d3d3b84f9be09dd8f9a5071026f9807e036abeb

Manifest digest:

sha256:03e0bde899a85793cc3190a9c1f8bcabfdcf08aa3cd7761a3722aadb6ab73338

Size

277.43 MB

Last pushed

1 day ago

Vulnerabilities

0
0
2
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:11892bb625674778dc25a3502193bc0799d6d868c4807d028cf9b2fd20c2cc22
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:e1c0d1a7d9c7300ecc795a5d71a5e02b7b4f140b52bb949859fde3830ad42921
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:0c0637ed7470bd4fb605c772e47df8c5747407e5667f69aee7d2a8aff8f37a65
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:2523f1ea3a876ebf91bfbfb044a50c93a0d70e677919abab8bf91da3f2744236
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:10bf93a1327f436197187237e73f34b825eb04fe9ea2e8aa820fee1f3f3022c3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:6cd75e9bd1784bc7701f2ed462c44c13bfb971e69f1af48b98fa63ac7f72633d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:146b764d78bd1477c91ac168a91c2d27b7b5ca4a365e970c8bf8c67ee632ab59
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:82b8ee9e19dad3e15da69bd3e9d7d6116610e79e8ec45c6526bd93b79ae20d05
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:f35e705ca281ba0030ea729afe29060f409d579922af162c61768d3cb9d0d8fe
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:05dcb26f037258e6ea2329dc30179d9800f2a2879361cf18d1bb8e852531db86
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:cda08f2c0c49d9cec7722c407e9152079be9212ed001ea1719992668daca85d5
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:d7177345e15e152118e3332cdbb558f53a601510a0085aee47aec763915fb7ba
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:5b4a240dc29b137efe51948d92da21afecdb64b82c7bd246d816163636d1a95f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:63598f28e06c36a83d67cf297ce34ed8fd094ea854448b50287d59b49130f12f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:e10a5653fe1b4d11ff9165a519cf45ee8a4e475214935cd07f4bb5a60d5cec8a