Sign inSign up
MediaWiki

dhi.io/mediawiki

MediaWiki 1.46 (php-fpm, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.0-debian-php-fpm-fips-dev, 1.46.0-debian13-php-fpm-fips-dev, 1.46.0-php-fpm-fips-dev

Index digest:

sha256:3a33cbfa7efb6887d76a4ca9d4be6b8d8cc493b84a69ce5c89efeccf26685f27

Manifest digest:

sha256:496f6f31036ebe69c9fdcb2048afda2b2032890046bc6729ee65bee179dabed5

Size

158.24 MB

Last pushed

15 hours ago

Vulnerabilities

0
2
2
20
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mediawiki@sha256:6d53e6825b2a05537fbdc8bb45a47e883978fc64800be928fab9f268689a863c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mediawiki@sha256:4897e139b7fb08ed4823244488c9a8fd1cf0c66df15e878786462946bdc466cc
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mediawiki@sha256:6a3eb18277f1a95b96e90a0c94fbc72d9729deecb12d6823918b0f6d92dadce6
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mediawiki@sha256:00e9cacd1ec036447af0744ae2248a466fddc4dec36a1d825d27bdd222624ea7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mediawiki@sha256:261c14002e023d3e6c2b8efc2754a72c77c72c97514637bf7aec6b223a0b1a99
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mediawiki@sha256:99bf94694b303811e396cad34d99444ed3a13a02867fcc22f06523fe4ed8c448
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mediawiki@sha256:e0613b597246a53726abf775ee86d38349ceafe7bb0612c0c8e4b53888ce4439
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mediawiki@sha256:cfb26cc3637d2ab02c4def5b4a3fdbded2b0eedb6f841a9ef882212aa98d640a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mediawiki@sha256:59cccb9c0d7a78ca31ed50c9836029eb123d8f7aea06e1d273ef68fd2b1be743
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mediawiki@sha256:f75d1c0962cce3cb1992e2c7db7c12cd2ec27a1627ec0a56113502869b53f908
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mediawiki@sha256:e500f792b47e118959d88f14b65790ab593738e7972eccdc48878e506e3d8fb0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mediawiki@sha256:d32d2d9d0099abf6f2a013e61f11f6d5a0739191f57cfe42f2bf9dfec83bb0ef
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mediawiki@sha256:60c6a144012d28b4a5aaaf8b4f2bc1efe80ee3ea8075de00b5c781bc4b0f8ca0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mediawiki@sha256:84ac07b8e863973f1a33a6ce016d5574dac79cac7f2b89ebffab0e41667855c4
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mediawiki@sha256:f945642f7280c41e49811b56d86b2f9a799101e38e97d22bc1eb451feb396d8b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mediawiki@sha256:3e50326ef93e5ee109cb71317321dd984793da34028974a19febfe1d1b72b350
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mediawiki@sha256:d99a68ee4d24d53239b4dd439ae185a64f8a35bdfdd02590cffcd1c1279c7b57