Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips, 2-debian13-fips, 2-fips, 2.95-debian-fips, 2.95-debian13-fips, 2.95-fips, 2.95.12-debian-fips, 2.95.12-debian13-fips, 2.95.12-fips

Index digest:

sha256:d529661b43e55366471fe0104f87c5dcd9bebbbaebd38c052271b10157079ca1

Manifest digest:

sha256:aff82148ccc8b1af85fd747afd5d8a85586ba74fffb2174b91d071a4c0e2cf67

Size

183.40 MB

Last pushed

3 days ago

Vulnerabilities

2
3
7
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:2-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:95de260d024def90d56c85968dcfb8488896ee2c3e0fab8d7fe8554818c61ed1
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:a2d3890394c8eb50263a26db3cb54e07ea3871af26a0ecfd1d1e3bfc827d02a4
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:7b9101114e7fd88d107f9d89273f79f00cad71caaed9dd7b76cce2c3182e9c90
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:b281c8d14069fddf6bdf4cd14318afe0d082f311d93cfcca5242b24489f1abbd
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:5ad6f7522e1d84651e7366a389b33b86684197d229976c10e6b0f29235b85e5a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:bc01e24907c8c45477078e9a85c61a0a7c8c5bdabb6384df7c077a347d243a49
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:1804ce759a906117f2fe30d8d718e1f7d6fd2d927933f6d2714d86d4a43725d7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:a7f7601a65d055e9fd6ef41b10c9f143c91668bde57b9268738cdc14bfc30b0d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:9deeb5c3b22b31427b544b298f30de3c1fd123a91bc7209601089eed4a4066d1
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:14eba1233c0637df32670477de3075d0fc1d076d01a7fec5c6a54abf5225093c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:9d74a769fdefc96261daa35a2283dbe1b8119634fd6f4413e25a764eb16728ff
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:99c44791cb0e6b607ac56b4b7317ec3c92fdccc8405ff7e06abd5d5aac817c1f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:cf2c28023f44a95b984336814f82b1748ce5e21ed823a26f015bcf02b56a6fba
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:4cb47d6eb4e955b3929d2724800448c0379e6182bcfaf67d2410e3394900454d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:1094185b9402d2dbd64914632c1331e3bb13082dc60e7daf9718e5f084fe50a1
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:95c9942a3817360069835cc77de238284a49fa4a74c426449da115ac992603db
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:f8d4a967d16df423cc2d2230edca2309af097ff5e220dfb3ee75348882034945