dhi.io/langfuse-worker
2-debian-fips, 2-debian13-fips, 2-fips, 2.95-debian-fips, 2.95-debian13-fips, 2.95-fips, 2.95.12-debian-fips, 2.95.12-debian13-fips, 2.95.12-fips
sha256:d529661b43e55366471fe0104f87c5dcd9bebbbaebd38c052271b10157079ca1
Manifest digest:sha256:aff82148ccc8b1af85fd747afd5d8a85586ba74fffb2174b91d071a4c0e2cf67
Size
183.40 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/langfuse-worker:2-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/langfuse-worker:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/langfuse-worker@sha256:95de260d024def90d56c85968dcfb8488896ee2c3e0fab8d7fe8554818c61ed1 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/langfuse-worker@sha256:a2d3890394c8eb50263a26db3cb54e07ea3871af26a0ecfd1d1e3bfc827d02a4 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/langfuse-worker@sha256:7b9101114e7fd88d107f9d89273f79f00cad71caaed9dd7b76cce2c3182e9c90 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/langfuse-worker@sha256:b281c8d14069fddf6bdf4cd14318afe0d082f311d93cfcca5242b24489f1abbd |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/langfuse-worker@sha256:5ad6f7522e1d84651e7366a389b33b86684197d229976c10e6b0f29235b85e5a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/langfuse-worker@sha256:bc01e24907c8c45477078e9a85c61a0a7c8c5bdabb6384df7c077a347d243a49 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/langfuse-worker@sha256:1804ce759a906117f2fe30d8d718e1f7d6fd2d927933f6d2714d86d4a43725d7 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/langfuse-worker@sha256:a7f7601a65d055e9fd6ef41b10c9f143c91668bde57b9268738cdc14bfc30b0d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/langfuse-worker@sha256:9deeb5c3b22b31427b544b298f30de3c1fd123a91bc7209601089eed4a4066d1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/langfuse-worker@sha256:14eba1233c0637df32670477de3075d0fc1d076d01a7fec5c6a54abf5225093c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/langfuse-worker@sha256:9d74a769fdefc96261daa35a2283dbe1b8119634fd6f4413e25a764eb16728ff |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/langfuse-worker@sha256:99c44791cb0e6b607ac56b4b7317ec3c92fdccc8405ff7e06abd5d5aac817c1f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/langfuse-worker@sha256:cf2c28023f44a95b984336814f82b1748ce5e21ed823a26f015bcf02b56a6fba |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/langfuse-worker@sha256:4cb47d6eb4e955b3929d2724800448c0379e6182bcfaf67d2410e3394900454d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/langfuse-worker@sha256:1094185b9402d2dbd64914632c1331e3bb13082dc60e7daf9718e5f084fe50a1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/langfuse-worker@sha256:95c9942a3817360069835cc77de238284a49fa4a74c426449da115ac992603db |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/langfuse-worker@sha256:f8d4a967d16df423cc2d2230edca2309af097ff5e220dfb3ee75348882034945 |