A Python 3 runtime environment with the Python interpreter and standard library, configured to run Python applications with the python3 command as the default entry point.
Getting Started
To pull the image:
docker pull registry.hardened.eu/library/python3:latest
Verifying Image Signatures
All Hardened B.V. images are signed using cosign. You can verify the signature using the following steps:
Save the public key:
cat >hardened.pub <<EOL
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbxhUFlXkIIbDzdRAR9rc6kDPNb+k
J48lhqqlOMyiq3jkbKXNj2sEFMduFlNh63MrZA59PKf4TjS1AiCrvaFXNA==
-----END PUBLIC KEY-----
EOL
Verify the image signature:
cosign verify --key hardened.pub registry.hardened.eu/library/python3:latest
The verification will show the signature details and confirm the image’s authenticity.
To verify the SBOM, run the following command:
cosign verify-attestation --type spdxjson --key hardened.pub registry.hardened.eu/library/python3:latest
To download the SBOM, run the same command and decode it:
cosign verify-attestation --type spdxjson --key hardened.pub registry.hardened.eu/library/python3:latest | jq -r .payload | base64 -d | jq -r .predicate > python3-spdx.json
Trademarks
This software is packaged by Hardened B.V. All trademarks are property of their respective owners. Use of these images does not imply any affiliation or endorsement.
The latest tag is only public. Contact us for detailed information.
Hash | Tag | Size (compressed) | Last updated | Actions |
---|---|---|---|---|
sha256:91da0b2f35958... |
latest
x86_64
|
13.14 MB | 14:08:36 19/08/2025 UTC (Calculating...) | |
•••••••••••• | •••••••••••• | •••••••••••• | •••••••••••• | Contact Hardened |
Package | Version | License |
---|---|---|
alpine-os-release | 3.22-r2 | MIT |
gdbm | 1.24-r0 | GPL-3.0-or-later |
libbz2 | 1.0.8-r6 | bzip2-1.0.6 |
libcrypto3 | 3.5.2-r0 | Apache-2.0 |
libexpat | 2.7.1-r0 | MIT |
libffi | 3.4.8-r0 | MIT |
libgcc | 14.2.0-r6 | (GPL-2.0-or-later AND LGPL-2.1-or-later) |
libncursesw | 6.5_p20250503-r0 | X11 |
libpanelw | 6.5_p20250503-r0 | X11 |
libssl3 | 3.5.2-r0 | Apache-2.0 |
libstdc++ | 14.2.0-r6 | (GPL-2.0-or-later AND LGPL-2.1-or-later) |
mpdecimal | 4.0.1-r0 | BSD-2-Clause |
musl | 1.2.5-r10 | MIT |
ncurses-terminfo-base | 6.5_p20250503-r0 | X11 |
python3 | 3.12.11-r0 | PSF-2.0 |
readline | 8.2.13-r1 | GPL-3.0-or-later |
sqlite-libs | 3.49.2-r1 | blessing |
xz-libs | 5.8.1-r0 | 0BSD AND LicenseRef-AND AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LicenseRef-Public-Domain |
zlib | 1.3.1-r2 | Zlib |
The Zero-Clause BSD (0BSD) license is a highly permissive open-source license that allows anyone to use, copy, modify, a... Show more
The Apache License 2.0 is also a permissive license, similar to the MIT License, but with additional protections related... Show more
The SQLite Blessing (BLESSING) is a public domain dedication used by the SQLite project. The author disclaims copyright ... Show more
The BSD 2-Clause License is a permissive license originating from the Berkeley Software Distribution (BSD). It allows fo... Show more
The bzip2 and libbzip2 licenses are permissive open source licenses, allowing use, modification, and distribution with m... Show more
The GNU General Public License version 2 (GPL-2.0) is a strict copyleft license. If you modify and distribute software l... Show more
GPL-3.0 builds upon GPL-2.0 by adding clauses to address modern concerns such as software patents, tivoization (restrict... Show more
The LGPL is a more permissive variant of the GPL. It allows developers to link to (use) the LGPL-licensed library in the... Show more
The MIT License is a highly permissive open-source license. It allows users to do almost anything with a project, includ... Show more
The Python Software Foundation License 2.0 (PSF-2.0) is a permissive license used for Python software. It allows users t... Show more
The X11 License (also known as the MIT/X11 License) is a permissive license that allows users to use, modify, and distri... Show more
The zlib License is a permissive license that allows users to use, modify, and distribute the software freely. It's simi... Show more
CVE | Severity | Package | Version | Fixed In | |
---|---|---|---|---|---|
CVE-2025-6069 | Medium | python3 | 3.12.11-r0 | Not fixed | |
The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service.
|
Image comparison functionality will be implemented in a future release.