Sign inSign up
Clojure

dhi.io/clojure

Clojure 1.12.x (tools-deps, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-tools-deps-fips-dev, 1-debian13-tools-deps-fips-dev, 1-tools-deps-fips-dev, 1.12-debian-tools-deps-fips-dev, 1.12-debian13-tools-deps-fips-dev, 1.12-tools-deps-fips-dev, 1.12.6-debian-tools-deps-fips-dev, 1.12.6-debian13-tools-deps-fips-dev, 1.12.6-tools-deps-fips-dev

Index digest:

sha256:efac53a4bc4309f780f955535a4b9858ee377f23ff12db6dad5101e85ea450dc

Manifest digest:

sha256:72c769839fc4deb244cf2bde253d2be553e80f8e3f017c20e1b0ce4e6010f156

Size

196.98 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/clojure:1-debian-tools-deps-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/clojure:1-debian-tools-deps-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/clojure@sha256:15bc5854161bf1278cb055bba40531f20e62d4bf54e4efd53781c23554d5df0e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/clojure@sha256:ac6b53d815b5a39a6393c9e61e35dea401c5d963cafa953bbfbd78d82ffa00b3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/clojure@sha256:9a39eccc6378e1d03053f8703faf297b2bd2bfaca0cfcb2df7a2607e7e418819
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/clojure@sha256:df2eab634d7428df96c8162767be3ced408dd09a6ae69216423fed7debc630ee
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/clojure@sha256:16a1a93a6faef97a869f0f442b07d9b9c553bae98cc917fe16bf225801b9eb72
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/clojure@sha256:754139a00c25efbcd4187cef46372a49c84fb9a2edf2ea1d2fd0568489f0a8fd
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/clojure@sha256:fff48e25dd20ee061041fdecf9ecac6c5d98f36af719b3e1ae40619b5c5dda51
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/clojure@sha256:021b6845ef6fa11d55088e5aba464edf15a8232228d9509079221a12eab8bccd
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/clojure@sha256:11f0063cdff048d641036fd4194effd8807bed74a82a6e1f73f5d8966b8701b6
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/clojure@sha256:b9a92a454d0b2c558fe21699191ecdce98015cb7ecfd0bdabd93467efa41f176
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/clojure@sha256:87756f12835da3482108f2d94a1446e60bcd7cc41cbbc4aabfd4b645a31ff05d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/clojure@sha256:e826d570e3fbff5cbd18bbe098829c65f987ad2ab775cc307a636edc86fade79
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/clojure@sha256:6e4d60c3784b0f408474039c4680965606f0a9fad4de980e0af4afe6abe340b6
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/clojure@sha256:b4acacef1a71af790d7f2deed4be235da250d853cb64abf1cd50c12499b7a8a5
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/clojure@sha256:0ea160bfb6cf6456875d5f64303276f764fac87564fbb8f9802cde05ee225b76
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/clojure@sha256:1210babfa880de433dbd5c3e980305fc2f0bf195c980034ca39a7f330abec609
SPDX SBOMhttps://spdx.dev/Documentdhi.io/clojure@sha256:609d41d6703d50cebb420d31ecd95fc48a676225c89d916ec3c4f495299795e3