dhi.io/langfuse-worker
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.225-debian-fips-dev, 3.225-debian13-fips-dev, 3.225-fips-dev, 3.225.11-debian-fips-dev, 3.225.11-debian13-fips-dev, 3.225.11-fips-dev
sha256:b6a1191183a0f64ed7f6dc6514442cf236d1e1d2495b55fc6a54df699b96d9b1
Manifest digest:sha256:a28f1bc5ced0a4e4db3b5c38e8b173729d0d45516be2acc964899b71a3df579a
Size
211.15 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/langfuse-worker:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/langfuse-worker:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/langfuse-worker@sha256:cd5222f38e0daf5013c17522615fa353763b52ba10b542b1009edd592b05223f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/langfuse-worker@sha256:22ba327c14302df7e1d76ebb6c63bf673ef8bad043496256b92c2495e55f5ae1 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/langfuse-worker@sha256:c44f13172d8cbfeba27cbbd20da6cf4c24fe4d324aab61b6039c5f6afc08d6e9 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/langfuse-worker@sha256:8df18a0bbf1c7c68342a289960cdc6a45b8eec2ced2716786443b7ac3fa050e6 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/langfuse-worker@sha256:4ae1989796eb9b9da1fdf7889fd59db7dd17038235bf3789b7f1f7c04239b58a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/langfuse-worker@sha256:9d240e57141ba5c12779f18e45c3b926a14a287be9f5201c5e5cf661f4b49f18 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/langfuse-worker@sha256:42c615c0d14b5a409bc3960adbd9e0570f5c15e5f91f8bc5b8f0c9d4cbc8e986 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/langfuse-worker@sha256:d2be142d67f711571fe29e3c3a24ac926f861cad242c8fbce49d1a630052e7ea |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/langfuse-worker@sha256:7d910cc8090ac211d68bcd4414023310862e5d6f868dfe78aa236f1182b0702d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/langfuse-worker@sha256:ffc2e3d710e31c8b53daaa796a8119d8742338c9cf744b3973166fe246146bea |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/langfuse-worker@sha256:2d4abb3b2257b18a920d77bdb4afe26e544f9f4df56b835221ac4a07c6a63082 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/langfuse-worker@sha256:99f00d5dbe0d96bb6ccefe0d3d344648a04a7794a222aff5c6b7b32622c52558 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/langfuse-worker@sha256:9da20d711637f469d92a427cc68bdd4582ad90db322bf9e577910580f75f3ce2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/langfuse-worker@sha256:5666ad178fc70f1758037fcc48f46f6845c12adbdee3ff79d16ef00e1127e7b7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/langfuse-worker@sha256:32c9c7ef3d319696e000d28e095440a9433aaa30a91613ce1e83bdae87bd4587 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/langfuse-worker@sha256:30b867bd2993861691bf8a7b8cac28fad7d32762b2a7e5d49d8a91b167bac5e4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/langfuse-worker@sha256:8b47a022e4c923e7b555c8150f98c425472684f7d355675621f53ade46f8240c |