Sign inSign up
MediaWiki

dhi.io/mediawiki

MediaWiki 1.46 (php-fpm, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.0-debian-php-fpm-fips-dev, 1.46.0-debian13-php-fpm-fips-dev, 1.46.0-php-fpm-fips-dev

Index digest:

sha256:e4ec312459a7b0441b6be3d6ab0106323bb8b23e1304b706ebe9740b24e7ad70

Manifest digest:

sha256:7b8814262d992ab813a6801808b4c62ad66f31dcccafaa2f663da86325458652

Size

158.25 MB

Last pushed

7 hours ago

Vulnerabilities

0
2
2
20
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mediawiki@sha256:5fdbce7bb6799baafe45dd398839dc68992c6a500f1e1bdb4001e0482c5a7305
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mediawiki@sha256:ec7776a4f754eeea71c76b2102b7357c55f8d51df692b74ba02daccd7a93c014
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mediawiki@sha256:2fc7b47b576a0fcb8f0c9db7d7ff00f377b4901f95e4f1b5ada11b489dc660fb
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mediawiki@sha256:e7f05533cf567a0e18a567aa19a82c7801a4af07545d6afa019b9bdd8e7e9168
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mediawiki@sha256:c13b70bb8751568a4872b2b470e7637257d0069d70685373eddc2df396832f61
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mediawiki@sha256:8d6be966d62ec4ad8838de38a5c63731fd5d4280639a87f6f7fbd8d47b35ff84
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mediawiki@sha256:da0fce3b61ddb436220c67c6bbf666231fb4ccd0488704bd7663368b6fb92182
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mediawiki@sha256:e7fd5319f451f45450f0f6872330bc37b2e935b2a5c749bfc72940cf2ef3ceb0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mediawiki@sha256:2c90412bc622c7a9aaac0edfb1eff8b056d606b37ade43394306d7ad59ad0e69
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mediawiki@sha256:4c98271140f21162b6cc4c66d9b1333f5615a064957cfaa485180a0a37ff5c58
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mediawiki@sha256:040ac04d11ba95b72a1596a6ee8925075cad7346c644b9d012b7dc32bdf1512b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mediawiki@sha256:5c8883f2360003172d109cbad4eb61958c79ce8d91961ea5cd1f8db1b26ca421
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mediawiki@sha256:cdf4d216fcbf99a14607a689d37d4da832b0514d52279f1e0648fc64a9efe4dd
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mediawiki@sha256:773fab131a6f8b640eac9cbffe3b341154646f1d92cc3acdd4ec6f932ae9b99d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mediawiki@sha256:99b599a7c81e3d61dfe0bb231d3da51d839d32218a911639424349c93fc87a16
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mediawiki@sha256:7132c3e2a92927f4c4d884623eb67f01ec1cc28b37b08e2ffcde7310f51f4e5d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mediawiki@sha256:ef775946721468aab419869b4e0b51efe2051e4207886a8a0ee8a773e7692755