Sign inSign up
GitLab Sidekiq

dhi.io/gitlab-sidekiq

GitLab Sidekiq 18.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

18-debian-fips, 18-debian13-fips, 18-fips, 18.11-debian-fips, 18.11-debian13-fips, 18.11-fips, 18.11.14-debian-fips, 18.11.14-debian13-fips, 18.11.14-fips

Index digest:

sha256:3fffef2d322418a7d85c4ac7f133425a90819d9dbd5dc0a97e9cc156caa15f8b

Manifest digest:

sha256:b1826c3f092a887d3b181e9f2e59c08ef1b774e03bd22a65629ffadce1057d79

Size

556.66 MB

Last pushed

11 hours ago

Vulnerabilities

0
45
30
17
9

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/gitlab-sidekiq:18-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/gitlab-sidekiq:18-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/gitlab-sidekiq@sha256:f2bd94529667cffa258bd4a806510dcbe9bb2c0620b5b259eebba0a5a29f2219
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/gitlab-sidekiq@sha256:14c82946bb9ee69ad231707c7c04f53c4693adf158b08ddf8bc8e1319b1f1999
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/gitlab-sidekiq@sha256:1319377606995d3f4ecb7ec8deb29bd94a7abf2fc306078fcceac13764ed687d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/gitlab-sidekiq@sha256:f217237c99f103d25af51ff16e5998397800a7f2902f1be44f16fb8cd2e23fde
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/gitlab-sidekiq@sha256:e2b3e744945800b6d9773a5398661941fbb63e2f8c82bdc4995a6eeb39281cb0
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/gitlab-sidekiq@sha256:c56ae7d3426099071cd8ad3f447642c882da21c9a1d40a71ef6b94bb784e562d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/gitlab-sidekiq@sha256:6ea210bbd24d831edfed1e0e31069d02011077070d85bfb11880f635d2996133
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/gitlab-sidekiq@sha256:d076bb1b992a09ad461a14dc744d2e8e3616d80a19507b66e88eaf80653efee0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/gitlab-sidekiq@sha256:a8e47f39ff5508575b1b729cc621480b4a0ed6b302f276e65a72afdf2ab772e3
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/gitlab-sidekiq@sha256:bd53acf1a69bf2272e290748e75b1e66bceaa290c989b51365b15c49b1ff055d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/gitlab-sidekiq@sha256:69207ba39267a856273e6ee2f0841c10150997cce044ec939d9fc2526a780cba
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/gitlab-sidekiq@sha256:b83354778df5a6a46f53f2c4d157aba3f208a9dc3e708007f25a32ac21852033
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/gitlab-sidekiq@sha256:54e907076d6fa13be57f4eecc9d9e9bb7b171da479f87857e9dfd8b8dd9ae936
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/gitlab-sidekiq@sha256:5e672d5eba56d5efaa7f24dee1f99d64b6231eb979a1732579e6685074ac4b5e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/gitlab-sidekiq@sha256:21e39459dac8ecad844bf395b89f2ad07bd58ab3bfec3f67ab24304b037e1802
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/gitlab-sidekiq@sha256:e44a81ef9732159ff9e80e723ef9d9326e65905a9838921888edb869f55da35d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/gitlab-sidekiq@sha256:90f8343e35ec1c6b4091dca7cc93d82668e7d0b22b0f0f64614d97cd5b3a3712