Sign inSign up
GitLab Sidekiq

dhi.io/gitlab-sidekiq

GitLab Sidekiq 19.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

19-alpine-fips-dev, 19-alpine3.24-fips-dev, 19.5-alpine-fips-dev, 19.5-alpine3.24-fips-dev, 19.5.4-alpine-fips-dev, 19.5.4-alpine3.24-fips-dev

Index digest:

sha256:055ca934c0e0652a53ffa469c95570e837211d7b93c1a196d8360497fb2f0ac5

Manifest digest:

sha256:5ff2c90212249ad09329d16506143173ed7f9b49b2ec79787b514e911bef8ade

Size

702.34 MB

Last pushed

4 hours ago

Vulnerabilities

0
4
6
0
7

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/gitlab-sidekiq:19-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/gitlab-sidekiq:19-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/gitlab-sidekiq@sha256:61a35c881e957989955414bce11b077a97a6a0ba13f4f5198d658662b3fa8d1d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/gitlab-sidekiq@sha256:543cbdf628fea43ce851bca656124236ce00a4ac97eece6f23c3966679ccef66
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/gitlab-sidekiq@sha256:9a1526e5a7d6ccb7819ff816f79638bcf0eb3f08f915c13d58b00903932217bb
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/gitlab-sidekiq@sha256:b05c3d87579e6bffdce2db4320d20ee158602c9fcfaf3f72d1ca1eeec05c42f0
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/gitlab-sidekiq@sha256:df9df4c4f7e74697dcf34f729eb920d876ce1e6e3ccbd2553266c4c36c30ef5b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/gitlab-sidekiq@sha256:65488ca2c297ee8d41820b72335de1e00cc2cabefaf110dbf597c91441b25e85
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/gitlab-sidekiq@sha256:7f9d9f88cef052d6193c124b0bbbe54720b8fbd7461ddcce427f1c512266e0c7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/gitlab-sidekiq@sha256:1c4fb9222a5ee565ad6d66e8e2896bc81124fc0f6d3382e75d4a77f6eae0f936
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/gitlab-sidekiq@sha256:23d4b7769693b06d78cf1fc1021ffd27683263a2f5e8f1fa5901334581a05c05
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/gitlab-sidekiq@sha256:3046720c01aa56b1f16f81a8421ea55c93bbb7e91fcb6c50913c672ad24f17ad
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/gitlab-sidekiq@sha256:b8a54d55d61bf6ae0c0b6f686d71fbce4ab3c841cfec3cac7615cf4fa1633127
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/gitlab-sidekiq@sha256:07f5900aec2b13d2b9e578bec5a2aafa1e4157b378e4ee8f014abbbf8bc3975a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/gitlab-sidekiq@sha256:4cce6b385dd8d1bc879e972b7c7dafa1214e436c5d6abf878068d9ecd8fa0d95
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/gitlab-sidekiq@sha256:caba1340d012ce3998162af43b4df33e30d0b58955864ae75349b2d6bab5bad0
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/gitlab-sidekiq@sha256:71f522f4f0a219bf4a3a90fc1a339473455061e6fe771acb9774389aacaf71b7
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/gitlab-sidekiq@sha256:11c08fd2a3c343acd37e93eaa9ff795e1facbc0fb5b428d564689c8f19aa6051
SPDX SBOMhttps://spdx.dev/Documentdhi.io/gitlab-sidekiq@sha256:1dbbdafb1950becbfd9c045e57424876a88a6db0b588c53e1cc9e0e5402978b0