Sign inSign up
MediaWiki

dhi.io/mediawiki

MediaWiki 1.46 (php-fpm, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.0-debian-php-fpm-fips-dev, 1.46.0-debian13-php-fpm-fips-dev, 1.46.0-php-fpm-fips-dev

Index digest:

sha256:4c51f23558eb60fae4a0191bd9e688ad1897efbb3897fbde6fc4423f4a4c6afb

Manifest digest:

sha256:9d24918ede737d4c5d219b71a5455662c11ef21f5b98b98cce3b76691f732624

Size

158.24 MB

Last pushed

7 hours ago

Vulnerabilities

0
2
2
20
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mediawiki@sha256:fbd747f277b514a82d9e9930c476f913caf952a6172b598e2e7bb59979ae3d0d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mediawiki@sha256:293dddc4a16cd854e878aa7e6348902ef44be59577e33b81545e9920288f8d17
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mediawiki@sha256:71c138c5f23266de3140dbe6f51517161c46abaeac8d80c5f57d42c193ae825b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mediawiki@sha256:3b69f69cba2ed1884f499cf7e4cc5a295984bae743d88fcc9bc4d1868750630a
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mediawiki@sha256:c79f63622ddf8de09430e47628f79e1729cec27f037c5fab510311abe5f8520e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mediawiki@sha256:d7af5085973140d6e7244cad368147db42c5e430ad52cd880aaeeb3aaf08624e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mediawiki@sha256:acad14e8143b69f7260f3e25239c992553b66de830837151a9e34f3d0bc6ba18
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mediawiki@sha256:ac7986172c9340bcd892512fd6881a291cfb66edade0b1625888e7c8ce35b4ad
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mediawiki@sha256:bc410a740d387319f136c2fd7f43ac9e4a0a21382b6304a416d991391eb8c72a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mediawiki@sha256:063b9799ee051fb8205e9337cebff55d9e984590b37467a928187210bfb940fa
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mediawiki@sha256:563c92d0e8f3995c5931fefa9ae61b6f4188b7a218f49f108f88213b37a7fa95
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mediawiki@sha256:464707bf962734e3c2b250f21c00cf64936655fb5790109b6e88187a67284e1e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mediawiki@sha256:77b10320ce3ff52e8716d65375d21e875fb29629855a71f91c51f3f9b38a1677
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mediawiki@sha256:ee7e2af5948609dd393a100bd67aa9846cc6dc5d85105cc22f7bb4288e504edf
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mediawiki@sha256:3a58105439d22664785e1261045baf02bcbc8fbd01b4b0c1533fc115bcc0bd04
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mediawiki@sha256:4bf91c32408ee470beb351c37fb93cb29f1f01329f4545eec611041190c85607
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mediawiki@sha256:d16e25ebf23530fafb9517650eb7cf8f24c64c964b2d3336aa0101d6511df174