Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 3.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips, 3-debian13-fips, 3-fips, 3.225-debian-fips, 3.225-debian13-fips, 3.225-fips, 3.225.12-debian-fips, 3.225.12-debian13-fips, 3.225.12-fips

Index digest:

sha256:4e5de487cf940bf7f4e29800848c5325a5309d1ebc3150c470f309afa640a7d6

Manifest digest:

sha256:e2e873bc900b47cc96a44079322b2312eca1ddabe1789d5263cbfe3ce588b45d

Size

193.92 MB

Last pushed

1 day ago

Vulnerabilities

0
0
2
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:3-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:ed64e05ae5f6974f250f383611d939162d56b9acb5f83c0e4eb508fda5d339da
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:5605ac25baa82cdc000906a24d60f99513a24282c36c626760515ea05f74abfd
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:c982d344fafa1b154698cccc8de02218a850418e2bd256c52d6e83c88f84667b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:1638ad599c5f5e31303341f0957b564fa416fceeea71f6050034cdb8b5e4665d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:6a0c3d1eacfc33ab19d4081508fe985fffda11b5f61dfd8c11973e26831dc198
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:cee897c107699a4b38ba41b21b00dce2021062a752b6a4d2ad6a38ebf1797e4b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:48061fd798af0627caf99840e65a08fd65c02df54978784f56b1c320d968d4cf
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:6c3594e71e3107bf24b35ec66ced4b9f15e27c8e37a373e35f160be93d39ab56
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:0349a50db6a39dd782f8e186f1dba4cac55bac946e390ad959c7c97792651f22
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:da48844b30575362a5b28a0be0132da83144dad7acae121ea4dd67ea7050b5ed
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:6fa30f8985119b4cd5ebc44b9f49b5478f4629223436458041664e015299508c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:a01b5e3339988578e73190c07319ff4a9b8d02000a49595c9801ebf62e909143
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:c71c06b1c6144bfaecd4db9a7bb5ed9794136ff8422c7f804a3cad2bd69492ef
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:6455f304dbb1f872dadfdd8a9f7b5fb933f0028269f44815c72efb10d4c3c0f8
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:38f5f7ef745aa5a30cb0fe560e7e3a71ae472cc4275148f4e0300a6321417d53
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:ca865d2c50accddaf5b89884fa73528b6eb454d62d6e5d8e18155f6260581560
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:157cb8804765486d942cf78221ba92cc8e1a6cdeef324b736cc43c21bd092899