Sign inSign up
SapMachine

dhi.io/sapmachine

SapMachine 25.x JDK (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

25-jdk-debian-fips-dev, 25-jdk-debian13-fips-dev, 25-jdk-fips-dev, 25.0-jdk-debian-fips-dev, 25.0-jdk-debian13-fips-dev, 25.0-jdk-fips-dev, 25.0.5-jdk-debian-fips-dev, 25.0.5-jdk-debian13-fips-dev, 25.0.5-jdk-fips-dev

Index digest:

sha256:f814731f7982b9cf20e175577e59a068a277e5fea264d14a083c8d26c45f1ff5

Manifest digest:

sha256:bbc70bcc407f8e76739d446bfc7842fb00ece8bf8bcc9500bf5a0294fcfdb7cb

Size

94.98 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
6
5

Support

Active until Sep 2030

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/sapmachine:25-jdk-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/sapmachine:25-jdk-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/sapmachine@sha256:4117c22d6d159047a00d11c79148838c5fbf512fe114ae18509c245911d55bb4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/sapmachine@sha256:9ac2f92cfcc97bd525d7a09a9422271e425d9725fff00786fc8c28a9754123a9
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/sapmachine@sha256:9740287409cebe80050c62e0c8b52536448d96283c54a1744fe59f1122813993
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/sapmachine@sha256:a87553616d27b5e7d16177b201a9a29c7af23c94420bf09358d2fe76d30d684d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/sapmachine@sha256:c0d36b06718c048caa9c78126ff37b16901a15b7df267af76009bb84df3f36eb
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/sapmachine@sha256:e21b994dd95ba1af4b04a37755e3b880afe02ee772f0fb4f4478a56821fc910f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/sapmachine@sha256:fb778f8b266d1ef1bc5b9c22ce4fa6ea2563790aee7414e24cd7721f25f020c5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/sapmachine@sha256:49de3d4658ed5781a270117dd421e40c197e0246c56759c2e086917995da3b0c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/sapmachine@sha256:70e368bca2cb8176097229e821c77104faba72c58001cd80f1a5c30fddb8f2b2
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/sapmachine@sha256:d0e88f4c0e91e64fdb94edec1cc3d8582a1f34d2126f3b293ef004fcfc46e498
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/sapmachine@sha256:ce02f1677435905479834f7adc02b12c411759d19713bbb6e470bb7df0600334
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/sapmachine@sha256:56df0b749a3af157bcb29c0982cfbd00d7c72b97247a6cbc2c08abe0b1edcbf4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/sapmachine@sha256:953c2cd1409b0c9a563c617a3ff9280fc6b0b94b6dc0689eefb0a24a0f6cfc6d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/sapmachine@sha256:4fee73d06da3c6daa31d7741f19ba67045e830e53985a5dbecd79d0ef4b4f844
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/sapmachine@sha256:0fca0ec95717c3b2ca83b1fbc12e12c90df889878360bdc8c4c95a9e2a516438
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/sapmachine@sha256:b0cf10779b93fb23f8a3906ec001fc6289f295b0b3e48cd5fbb251b213b69e25
SPDX SBOMhttps://spdx.dev/Documentdhi.io/sapmachine@sha256:d85d25254ed3ff4a1e691f4742275d842a4614711afb5b68315200f527e6aa62