Sign inSign up
SapMachine

dhi.io/sapmachine

SapMachine 27.x JDK (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

27-jdk-debian-fips-dev, 27-jdk-debian13-fips-dev, 27-jdk-fips-dev, 27.0-jdk-debian-fips-dev, 27.0-jdk-debian13-fips-dev, 27.0-jdk-fips-dev, 27.0.1-jdk-debian-fips-dev, 27.0.1-jdk-debian13-fips-dev, 27.0.1-jdk-fips-dev

Index digest:

sha256:4c43ae8ccf9cfd7e37f8de444657ac5626039f4cef811aea4630006795cc94d9

Manifest digest:

sha256:12663bd1cfca060b73fbae825e909ff5d2d2d12f352991eb4ee2b79707870f71

Size

95.19 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
1
5

Support

Active until Mar 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/sapmachine:27-jdk-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/sapmachine:27-jdk-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/sapmachine@sha256:b1363345bd3f5a9794d22dc37195ec9ae585909a571674d57f14c84b7be7fbeb
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/sapmachine@sha256:e6ea16a634d37a715a0e25df90afb3ae8cdccd08aba450f2090784484faa7d10
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/sapmachine@sha256:e7b168eb56abc0a75568127a277db09994e5450c42bc05786dfa4877a4eab628
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/sapmachine@sha256:259f9295a1335c70d34b61d1e0dce05baa352cbaff361b6922cb4926ef37044c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/sapmachine@sha256:cd277d52bcd8d4af5de118a17958408d941c93444b710c3efacf151b4d8d7934
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/sapmachine@sha256:4fc1add3db2e3cd21df97147387bf0c2ce90f1a70c766961fafa7297ba649378
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/sapmachine@sha256:ba78b9be8fb6fbdaabd9ffce50c8b0cef66be083a677252e4f65c7382b56235e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/sapmachine@sha256:626e3cd52d3281a368baa3ff7beb893d77e9131b6d5b86f0b6c81a71d756d5a9
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/sapmachine@sha256:b2fa1194d47a5acbdda1269f77a89799e2538041815f3f46df9430fcfc289005
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/sapmachine@sha256:cb53bfac7bad4663cd14d9eb2247520d1391a921c39a6af311c2b2cf09c5ba7c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/sapmachine@sha256:e730dfd1424631d8d504ea8210fa4e6463f8d2e43133c4ce0eb262ed3c5b6e70
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/sapmachine@sha256:3ed9032c56813555b640dc7bf69663bd8dd82161c063f0ebae35e491bb166233
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/sapmachine@sha256:e82d78a3d6579f18ff8af03c270d066c7cfceaf85a1b8bf7b69f163380195e42
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/sapmachine@sha256:044dd0064188986404c1c8a1fcd12a5579fe3ef9adf79b72c63ed264a18a6696
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/sapmachine@sha256:d64ae4d0ae978064dae4bce950163537c31768af97aa691c0be25749284baf2c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/sapmachine@sha256:bff6cfd931c8a01b3405e7ae2df84c6cc534982470927a1f00227337c8138f92
SPDX SBOMhttps://spdx.dev/Documentdhi.io/sapmachine@sha256:26e7f7e9921e8e880f6773a17115af68aa022f226e09b4c737ece2f2af21c986