Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips, 2-debian13-fips, 2-fips, 2.95-debian-fips, 2.95-debian13-fips, 2.95-fips, 2.95.12-debian-fips, 2.95.12-debian13-fips, 2.95.12-fips

Index digest:

sha256:b37e5c596ecf3435c5fd538c95445c7ac2ba75bc012112d56239851dda09766f

Manifest digest:

sha256:657acfcad36651071c99bc3071a923aa111561a03df169299e9e94a504d22bfc

Size

183.40 MB

Last pushed

21 hours ago

Vulnerabilities

5
15
16
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:2-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:620b6547bb76fe7554dd6bf575472f52fc34d34e22b5e830fed5d6fcdc91d43c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:95184bd32acc5336f6d3f033fa82da3dcd8879d1f4919adfbbfc9163c18f99ef
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:0e747e936413fcc871a64d6616320d82eea3c9ccea17d8b1ce663074786fbea5
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:d3b6365fb44a501a637d60bb2329e47632f4261ee0a1325b8d9f2cd57b695e75
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:f7a10e48ff48f231a6cdbacb8311736c51fc79408a9c46ce9459239fd489ba35
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:349d4d5b83cff7c521bba98ace190ddba60fce058a0a127ab6ab5c30225ffc7c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:e244e57755c8308782c70272005b8ec66fcbf4a68eaf03c1164fb28ba655ccfa
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:be6c0d960619ebc77a44bc3e92264431ee98ff11204477d5d96738ec25aa1e25
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:8e8c81075985668a16d9a00d938ee98495b232aa4dd6161ff7cb69e5085a377b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:81dc22e350a2bc1cdf3779ac745763fb259125bf026bcaab029f5c3cdce49516
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:560d67a000296b52e49df01dbb82723d61039a987817b1798a9477f142849d22
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:1b291d33a40fffac888a6aed3792f374df53d106ef992fb0663a44f1ebc99b7f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:4e655b3c32df28218177e94369c8286e2a2dc74851df5af1f2f2eab40f968442
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:ee9e86ca05f1a2e0c1cb003b5475c334e4d00b69214c6c206d2eaff760ea2f63
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:9f7bb0876ca108f6802da0f3b18ff4c9542c403f5b8f96be8107a8ea23934f3e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:ffaca42643d2f969691b730809c1ff9367c982a1002e0f8bd1c7f8ed578d2903
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:53fa640f73bd0a48b9f3acbc522fcea24e24287380342c93241a9d0683acdd04