Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 3.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips, 3-debian13-fips, 3-fips, 3.225-debian-fips, 3.225-debian13-fips, 3.225-fips, 3.225.12-debian-fips, 3.225.12-debian13-fips, 3.225.12-fips

Index digest:

sha256:fa962b4c5bca12c35e28abfda0a90568da3941b1885c8ddb9d1340c55950a5ec

Manifest digest:

sha256:013cb87b5e0bfcf140ba8ffb96eaacb1444ed98fc993db6e80f28ea6b6372f33

Size

193.92 MB

Last pushed

16 hours ago

Vulnerabilities

0
0
2
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:3-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:1a44624b44cf9f6d149f326296b728ccada76442e966312b9e19e8e8d5a8721e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:71f63d3e21eba55b8e84f60a12982efbfd27892f7a93cbe2088e4eca158073fa
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:e6a096fea3150d90134e700da9b3d95593a1e3a945474e3869f64fa492904353
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:a6f4df5948d3189528500feba62d76daca336507aa203e2006c1d15148dd9486
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:d12f6c2e0d8399744fa10c091b09a1a933d740daa9c61d036edb804b511637cc
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:da832900a36123f5e4a4f622e9514719b270b76a2c3d1d1925a712aac865437d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:10199b3d8ccac0c3a850850ed5a92b4e601a88ffdb927503fb8672432ff705f0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:7a7214ac95ddc81d516db0c800445af043631046154f65789f2b51f45813be0a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:18fa3669fee744c4937ac5b01371ae9315520dd7621268fddf7f49ab795427e6
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:79395b8fb4880b84614b4193f5a2e79cb1bbb61ea9096acaa53edf810c28ca75
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:550d0750509bb76fccb57b4bcce4cdb1f4c0e940348ba977aa42dcbd16d7cd9d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:eb7a422d43b78a94bb0b042f996e8abddccf34ba1364d9dbd6adaf6354d366a1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:1340372a9bf25f65b4f9a781449bed29073fb8206fff700b046e0e6be886a8b0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:b03e7810686b7b57b01a58f422ce8694761a1cb85124f826e064a4f5af0f137f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:7eb628da0d69aca8e4ba2cb960f840da6e662803fb06d06012995db4e1eb1e2b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:8bc38e561d4ce65f48788ff2b360859dd2ea3df97bba90659323b2e23213edd8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:8e1eb802b61ced7163856591ee3b612a0f676320152eada35e25cf1899be3333