Sign inSign up
MediaWiki

dhi.io/mediawiki

MediaWiki 1.46 (php-fpm, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.0-debian-php-fpm-fips-dev, 1.46.0-debian13-php-fpm-fips-dev, 1.46.0-php-fpm-fips-dev

Index digest:

sha256:542572ec9ece9fa1aca3b5104b1defdb1ca7d24d2a05f2d64cba47d9d0c452e9

Manifest digest:

sha256:fc5b714f70808ddce21f0b7793b7a76b3568346527303f4f1a3e61123473f9ca

Size

158.35 MB

Last pushed

6 hours ago

Vulnerabilities

0
2
2
20
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mediawiki@sha256:5c147596673d96ae06db4815f77d53191089b21298aaf98b20ceb28b82775988
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mediawiki@sha256:fc282212b9fbd96204af927b23ff18241b7b596214ba8d6c1b5261da91d44d0f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mediawiki@sha256:abd52acd2b714c1fd1a16848d1585b2fea3494e60ce95f16a590983c96b1d8c2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mediawiki@sha256:3a746bf5b38f15178fd757be855d195696b4ebb155c8a39fc76eece441f55fcc
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mediawiki@sha256:7fe36b3fb90b15e4de895db9cc0b8d1d9a77d7d40b06c1a32409e4f61320debf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mediawiki@sha256:ff70b97d92c50f2ee295a8a46ee23acf42ca1864fbe1d0c215469412ca8ffb27
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mediawiki@sha256:3f2694e2a3a75f90e3a34cb40bbb98615980ca686f9d185546c79d2007fb682e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mediawiki@sha256:a3195dc7bc42da411e8bf5a712c0f63edf22ce8f097ab29e8afd3d48f9c9e2a0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mediawiki@sha256:3a6477c028334f841dbf3c66219a08a444bd31dd230e6afd2afb057f805c56de
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mediawiki@sha256:d37fc16563ae57d91afea4fb82f15cc458c9a01feb694c10a8f57df42f06a6e0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mediawiki@sha256:6448d101b4af28f0bfc32344d5e2118193bf35c9c95dbecadb2213e4a50799e3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mediawiki@sha256:eaf5004342661cd96d5fbe1a78baff17313ea5f9ce4d57f6235fcb5dfd9fa7f0
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mediawiki@sha256:55a64d80630103aab55ce48156e7679f4a72c96035fec9fcefd80fde4ed161fb
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mediawiki@sha256:ea46ce5be45ca58401aa758b855af11275736275d328ceef34cd3056e0130caa
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mediawiki@sha256:025c924a5b610401b561ad1b8bbc446e84077aa7de889732ccab5da29380e8ed
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mediawiki@sha256:66066d46e90a8d95cbd77ed98e7a6b893c2e5ab0a4de467e6b26ec5479b267b9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mediawiki@sha256:5a9151380139854f9c76fca8a88f209fe763f2cd4c13642da044416d77155b5b