Sign inSign up
GitLab Sidekiq

dhi.io/gitlab-sidekiq

GitLab Sidekiq 18.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

18-debian-fips, 18-debian13-fips, 18-fips, 18.11-debian-fips, 18.11-debian13-fips, 18.11-fips, 18.11.14-debian-fips, 18.11.14-debian13-fips, 18.11.14-fips

Index digest:

sha256:10697014552f3323f91c6da04022ca91abcd507746916a1011c38ea1358b28db

Manifest digest:

sha256:e7dd43be8ea2eddc0a840f402450974af8119cda63d6e0821df5c6210f666ce6

Size

556.56 MB

Last pushed

13 hours ago

Vulnerabilities

0
3
11
13
2

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/gitlab-sidekiq:18-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/gitlab-sidekiq:18-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/gitlab-sidekiq@sha256:9f9c10e4b83e82abbdc8522ab5550a691b25ab89806a018c768cca3beb7a70fc
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/gitlab-sidekiq@sha256:611040413b4106916f29a23dff4f1c3db89c92f3dc37558a78f4fb81a33ac94b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/gitlab-sidekiq@sha256:87c84bb21854aed93da3d43cadc8236fca7b23b6893a4fe7553fd30f3a4e89e1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/gitlab-sidekiq@sha256:45f0db9edcf56661b3631188c3ef8651ef2faeb8e9610f4d258743d2ba3f3b76
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/gitlab-sidekiq@sha256:99d55d160dd08cd049899620711667eda8c3f0a214e7d9d9e0d74afbd10e7a84
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/gitlab-sidekiq@sha256:b3bfd7a946d76b9c5c97e462ee1e7dbd0f7d2dd595c9c4337633cd8d5798e225
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/gitlab-sidekiq@sha256:b20e700801eafa8c2cbc7e763229dc987e55dafb6d4f19aa1bd37cf1f5f0224c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/gitlab-sidekiq@sha256:5588a40b585cdc2c01623cb55e8f96ea42d048b3d15bf1bc3b76d16fbd2987d7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/gitlab-sidekiq@sha256:4a716861e15298a9b087155ed2cec217cd1f9c02a73e93f541a7a6fcb16f85b1
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/gitlab-sidekiq@sha256:9e68a97eb7fae43d8a54e67bcaee0520310b35733a57258f219ed05146670d96
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/gitlab-sidekiq@sha256:f2c7cc5ba4c4aa31b7351bfe89f35ffc33f928e6c7c801bfab8df81719e736ee
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/gitlab-sidekiq@sha256:54780ee0ae4dfacb0b6e0b44ed80214d5598b6b1b7ac7f4ec0e039393e8ded5a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/gitlab-sidekiq@sha256:cd98484186c842034cfc732e04812770e33dad27d4b0621dac5017b7d6aecde4
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/gitlab-sidekiq@sha256:fe4b6713ea4b9abec758b2e1814283c521dbc1885ae93fd540c2c20a06c8298d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/gitlab-sidekiq@sha256:bab2bb1d9ccd935eafbc05ed431f057133fb4f70e1f8470f1e29727d92c97776
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/gitlab-sidekiq@sha256:9fefb5791ef6626ae18b651188f58e741b92264dfc4e5d2677d7ad4ad5053d9e
SPDX SBOMhttps://spdx.dev/Documentdhi.io/gitlab-sidekiq@sha256:370f80c7e91ce9f9605508dda7f5ef2154ed411d95affb3e62a2080f6a7e16b5