Sign inSign up
GitLab Sidekiq

dhi.io/gitlab-sidekiq

GitLab Sidekiq 19.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

19-alpine-fips-dev, 19-alpine3.24-fips-dev, 19.5-alpine-fips-dev, 19.5-alpine3.24-fips-dev, 19.5.3-alpine-fips-dev, 19.5.3-alpine3.24-fips-dev

Index digest:

sha256:7d4df11bbd624949472773e4ac5028af7480e3060ac0966e41ff7ca9b740c00e

Manifest digest:

sha256:3e965e52f2d5187f5a13bdfbdfc7aa6f0688f3202015e5f839b74b598d167da1

Size

702.17 MB

Last pushed

4 hours ago

Vulnerabilities

0
3
9
0
2

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/gitlab-sidekiq:19-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/gitlab-sidekiq:19-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/gitlab-sidekiq@sha256:c7e3cbf5a46503e1d9fe2ea88a1cf05c8f2270ba01254df92a53533f6616e22d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/gitlab-sidekiq@sha256:73a8017949d527f999ac970570834811662a945e3ed397dae0560c916919a302
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/gitlab-sidekiq@sha256:185cd741e4f272b1fc22ac488fb671a981e1a244c67f5569bc6ad95955ae3bee
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/gitlab-sidekiq@sha256:6c1d1a75412256159b7ead442cb05b567201795a38d042b73328094e97642a95
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/gitlab-sidekiq@sha256:56458c408b394f88ecaeace098ce8fe6207199bf08b4aaf6a15ef221281add22
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/gitlab-sidekiq@sha256:d15b198282224f2f66858c1a899eb061625f34bfdd784210f152b9664cd35f7a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/gitlab-sidekiq@sha256:c035b018063b2896b0272ce835e781e5fe5de985def547aa2aee66460e721bfb
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/gitlab-sidekiq@sha256:acfd3c2643d8ec2891fa3b479069318aa2d9d94ea86ffeb4479512ca906c8b63
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/gitlab-sidekiq@sha256:f3e818edd87eb9e371fa55a9c928f7814f0812ad25b659b9e919a08f0968ac90
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/gitlab-sidekiq@sha256:c7f6dabe6cc1f6a73359d37be8819a40eb3dc48271b1d73f4e1f5c97ab75e54c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/gitlab-sidekiq@sha256:a82ff1223c0031bf75810e8863329c7ed1c9583cbc451e6b6aa0fde5a35c5b5a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/gitlab-sidekiq@sha256:a65458bea075ce3e0ea84a63875f287acdbefac313678df4f1b30c4e8657eef0
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/gitlab-sidekiq@sha256:4023532bd40f014f517f4ca22c2d4cac2e2a7a9980a662bde15408c4104a6ea8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/gitlab-sidekiq@sha256:6c13840a51a6e88a97fb7c717400e19768532083b3895abeb766c11cc6d5ef85
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/gitlab-sidekiq@sha256:a49b429c32f38d34c26e940bf53f48bcc8377d4fcef955db8e856b114e5ce7c0
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/gitlab-sidekiq@sha256:a310ba886487bfddb2ca87ca4e444c67663c948810177833a6524818a2bfcb01
SPDX SBOMhttps://spdx.dev/Documentdhi.io/gitlab-sidekiq@sha256:67d7b8e8dec0e2165fba82f035a4a935d0c645c784ef6c893728d93cf7a2e678