dhi.io/nextcloud
34-debian-php8.5-fpm-fips, 34-debian13-php8.5-fpm-fips, 34-php8.5-fpm-fips, 34.0-debian-php8.5-fpm-fips, 34.0-debian13-php8.5-fpm-fips, 34.0-php8.5-fpm-fips, 34.0.6-debian-php8.5-fpm-fips, 34.0.6-debian13-php8.5-fpm-fips, 34.0.6-php8.5-fpm-fips
sha256:b18133a98116bf771546af27b8c278d5e80ab6c3c34a8f6ca57fe1d29f36529d
Manifest digest:sha256:b6c2eeb2422feb8bc227c356651e2911cdbc2c7dcf9b507b7db9c432f2683981
Size
274.47 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/nextcloud@sha256:7407760ebc5817034ff1d9f0e2d36780d14cde5c9527b3fcca14a5bb4645a6e7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/nextcloud@sha256:13295f5f6eae94b5bdd4a108b78c5ece45f5e12a4155ba37c2297e7f10619183 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/nextcloud@sha256:53ad1109264da8cb9e5e9721349758e43a5e07b76acf64077a7859644073ab50 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/nextcloud@sha256:8c0850c882a20f51610ee791db705a67e4153ef881c44e3f3c5d2c40f22729cf |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/nextcloud@sha256:4002cd32f116d6421466aa680c22262155a0973211313fa86105c45f6772bf6a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/nextcloud@sha256:3a37e2e63a84c44d33314063f1abecd5da72842252519ee957d6631b793435a7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/nextcloud@sha256:de7239343b5468f3c0cf241fe6e7e967bca00b21b8af77f74b979561dc36b009 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/nextcloud@sha256:b06fcdc673f1d51c8c19ca25e63a513d2e90a6ca5f8f8b9e6b5222ff7b7388f5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/nextcloud@sha256:6dcaf14d2bb29bfccba1cff0635e450eaf6078c79afc5e4c12db304e9872f503 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/nextcloud@sha256:5f7839b8e071e85f53a5a1db8aae685eb74cb6076ebd756220ea4d091b046619 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/nextcloud@sha256:b725ff8ad007d321bef1564f43f4ea0b0ce11663244c48758bcd3b1c3ad9caa9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/nextcloud@sha256:4fc6490b7d98b3ae5985f9e7c293ecd495f6630d2685a32a10e133a9decfe77b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/nextcloud@sha256:c92e9a52e60b657407a41bef0382b3a248f0b115e745098f64c3528c9b11b328 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/nextcloud@sha256:de773e57dd200f1f83b6a89c20afa9a691eacefb19e7ed2edeb1d406c0c50a94 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/nextcloud@sha256:e45d912f0d3d077450008bf9b84487067c8c732d8267676444c92c843d1e903f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/nextcloud@sha256:061ff627796632373be57c4c849954e16b8ed6655c7dd5247993ae855d125ca3 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/nextcloud@sha256:6610199b1a1a8ad26036171efaac87f59e1d444b1601a7377fd067eeb6b26b24 |