Sign inSign up
Nextcloud

dhi.io/nextcloud

Nextcloud 34.x (php8.5-fpm, dev)

CIS
linux/amd64
debian 13
Tags:

34-debian-php8.5-fpm-dev, 34-debian13-php8.5-fpm-dev, 34-php8.5-fpm-dev, 34.0-debian-php8.5-fpm-dev, 34.0-debian13-php8.5-fpm-dev, 34.0-php8.5-fpm-dev, 34.0.5-debian-php8.5-fpm-dev, 34.0.5-debian13-php8.5-fpm-dev, 34.0.5-php8.5-fpm-dev

Index digest:

sha256:68ff800fb3aa0dab8e25cca15d5a960ad4867b2dfcf541d6cca5c22a5e9a6043

Manifest digest:

sha256:b73a3018535d35bea4d27aea54b51029df6fc45f9d2e9899ff8f8dd855e6ab3c

Size

279.89 MB

Last pushed

1 hour ago

Vulnerabilities

0
38
12
5
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/nextcloud:34-debian-php8.5-fpm-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/nextcloud:34-debian-php8.5-fpm-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/nextcloud@sha256:34857058df1643db8c05b39511795d7063d20158e23ba721d3f7f435dad68a52
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/nextcloud@sha256:c2a40a8f37e4c7f2a7d95e2b70f0f6f3c2e880086c7897f6df2823c6e936f79c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/nextcloud@sha256:e0eb7a3e013d30bb3d8e94cde2ffacc265953aaee2277942be43ec93bf245539
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/nextcloud@sha256:e328f6f73271af12cb5b7bef270914c1940217abc4ecb86cde2f039d9ae97838
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/nextcloud@sha256:3f44022f44831f7e7c6058fbcdebf1ac7ceed3d432c029d85a445abc38f648ce
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/nextcloud@sha256:e67a266cceef0a51268d8fd9affa37cf0557207ab06a3a256cd0a33cc3360986
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/nextcloud@sha256:aac647bcf51855f178ee6b6794eac8f439152513803c2f52d499896fc3267ab9
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/nextcloud@sha256:cd9e89f3db1228a15a43e3332b4f88df1b440ab3a17bb522ec8721fa277f884a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/nextcloud@sha256:3fc0d2c9a0267287531b2af3395b5364e9d79fb0aa8de9c6d33dceeb5ac5f030
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/nextcloud@sha256:c12ac2314f935d905ce8fa92879c39aacfe5570d5455c2f5fd9a7c494ba981ff
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/nextcloud@sha256:e239212260f9d9a613e95fb434c0b1e13771677788993a9fe76d388a0c0a6c66
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/nextcloud@sha256:344b693953acbd5e3f561cfde18abc0d6a1d19d63c802f3d3fa1434a34a54746
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/nextcloud@sha256:befaa5272d71e2be16fbc47e687b84238abf79ba63621d898a6f996c7ac38997
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/nextcloud@sha256:07116118282f686dc182a69a0861b34d1680c4e25e716a3da1e3b09a0baa251d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/nextcloud@sha256:2767cde3725a1197766940aac992d75905e71d31f6928ff894f0678dfa502299