Sign inSign up
MediaWiki

dhi.io/mediawiki

MediaWiki 1.46 (php-fpm, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.0-debian-php-fpm-fips-dev, 1.46.0-debian13-php-fpm-fips-dev, 1.46.0-php-fpm-fips-dev

Index digest:

sha256:abe013d82003b80bb9d2b0358d8d3e86219eefd60724f6efb8b410194441f385

Manifest digest:

sha256:898e2dfef45c398d79bf214df317299f96747eed3228f7f2ce11b80621cfa1d9

Size

158.24 MB

Last pushed

3 hours ago

Vulnerabilities

0
2
2
20
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mediawiki@sha256:ef537fcca0a02e113423e77b63366fcbce6fef44a8269510ae9f6ee689b3df14
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mediawiki@sha256:63e418fb458591672e5e98affad7c41e2d722042377290a8d02e12554084dbb0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mediawiki@sha256:46412de17e85ea18965d379d72770335a9e6c57f4b3e18f47d8dd4e2c1785689
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mediawiki@sha256:d85175f307ebb0302298deba3055649e7dae246cc1b306a0a0acfeef770c0ea0
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mediawiki@sha256:ccd316eaf5a7a213c46fe25fbdc415f824ddc1a14ec532f1721d415e0cea2001
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mediawiki@sha256:618404147b567cdb2cd1fe9862e57cb64bf7b5eab09c661e4be5fdded13a7e62
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mediawiki@sha256:20145f35f64e3034c41bf7ca53877cc3ed7ba88407a97062c6585f9cffab0149
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mediawiki@sha256:85c1d6779994767e0798971de194ca9b34af63824467af850f1700d495895933
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mediawiki@sha256:7d4dd1d9b69c45fd140e25978a8f16de76573927bd3a9f07582a7f8b3fb7dfb7
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mediawiki@sha256:f89562a0dbebf5d64e1c1348e6a5b25527ae0ef6f7017aba76526fdda967b148
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mediawiki@sha256:7be2dd0f2b061a995c4f9cf4b928d9db9bb563c63d918eed0af42dcdd715a37e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mediawiki@sha256:bc25b0d9cf0a9ba35db74eb50bda61fef6304dfa3329d4de4b243ce9f1048683
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mediawiki@sha256:af61242f6b9a8dce38fcbadb345c7a47337fcd8ca849053fba5121d55d5d939f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mediawiki@sha256:a677eb326d7952914acc6ec3b47e315a80a222342166a97d97ad31f8966f129d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mediawiki@sha256:8ed999975f28678a209ca17a7fd6f3f1c172e698e29be12ba640f63d8e2ce4a0
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mediawiki@sha256:4652d89f4d35d09e66b074d9459a42391edc6fc5e9f63ad924e59a8b614301d2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mediawiki@sha256:a6462402b7bcc0d87869f3c97b024170af50fbfb32a55a8fbfde75e84e407000