dhi.io/gitlab-sidekiq
19-alpine-fips-dev, 19-alpine3.24-fips-dev, 19.5-alpine-fips-dev, 19.5-alpine3.24-fips-dev, 19.5.3-alpine-fips-dev, 19.5.3-alpine3.24-fips-dev
sha256:35c60caf2500bb6f31a5df579ebb7d2491e4614b4ecf0880d85ebcb9f58fe1ea
Manifest digest:sha256:18364c8f9db63ea011ab07d4f2ebf3af0f4567c993545428f3cf814e9673c445
Size
702.13 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/gitlab-sidekiq:19-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/gitlab-sidekiq:19-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/gitlab-sidekiq@sha256:904fcae4fa0267c804972cebdb12165c5f630e6d9e871519b4e6ed3b04c129b6 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/gitlab-sidekiq@sha256:bc9bbd94d446f6fc2538f6656fab026c4746b21f3a5743f320a7949ef37ba4f7 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/gitlab-sidekiq@sha256:88fefd5617c4a83542d6925346b1a96b0e046b9fe4506ab96142c4cd3b2dd5e2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/gitlab-sidekiq@sha256:6ea7b59fbd29d497dc978f152fed4807e49ebf6e4fc68aff4ac0d1ab85bba80e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/gitlab-sidekiq@sha256:586e5428b184993eefcd2836e44cc949e009e0df7b5f7d5e0abea406a5067d1a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/gitlab-sidekiq@sha256:83c41d780ec14474785d22a8d43f93195384c713189cd7c8a1f1bd9ea38b88b4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/gitlab-sidekiq@sha256:1980bb12e83aa1b6c1a0757eddd53239e5861a5924f8b4f46f17da3f1091868d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/gitlab-sidekiq@sha256:68e5f2ff3f340c64ae0792dba24201c66c52118348772a5fc8b993a48705310f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/gitlab-sidekiq@sha256:54c6eac862a756c55da05cc591de127018ac53e2926a71ad7cd5ecb1eed6a785 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/gitlab-sidekiq@sha256:4f8bd9322c32a7fcdda3513c3c8a1a4b21ace3d7f41744308ee77b6089ad561f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/gitlab-sidekiq@sha256:b7d41c419da36c23481e276e87ff73d849c7a5dd180ddd02befd627089d3ac69 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/gitlab-sidekiq@sha256:6536778d72d86ac86cbe36baa3a028a6c22ed32c67989d5405eeb5231a7a7b4d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/gitlab-sidekiq@sha256:0cedfa0df5cf8697b56bf9b584b4761e17a18b81af47d74e9b19d8e90bfdac2c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/gitlab-sidekiq@sha256:40f0ad45c7446fec88fa27c116222c334b7678fb3b11d67a9d8bbc5461dbfd47 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/gitlab-sidekiq@sha256:edd0619a64df4e921f61dcf86ad78cd686d699f7f1061f4c3c78a5b2b528975c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/gitlab-sidekiq@sha256:fa33d329615f757b2a1a421a6b8c35347154f9cee9dc6ad248dd9bbb187fde25 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/gitlab-sidekiq@sha256:16de4d432cb4474af5f28773499bbad7ebe3c408af10a7dc5890f92eef602424 |