dhi.io/langfuse-worker
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.227-debian-fips-dev, 3.227-debian13-fips-dev, 3.227-fips-dev, 3.227.0-debian-fips-dev, 3.227.0-debian13-fips-dev, 3.227.0-fips-dev
sha256:6eb6e0acb4275afe7a5daed3884ad30b43b60da90614b831d0ddaa7367980c92
Manifest digest:sha256:376137b55016470a1a835c5b4c2a74693fcce6acd9074e1a6bcd436e6181e0f0
Size
212.04 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/langfuse-worker:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/langfuse-worker:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/langfuse-worker@sha256:396cbdc91b2cccecbda2e2aef6d5862476d6e14310ea0a356e18c2f7cec07e42 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/langfuse-worker@sha256:bbfad90556b4bd36f86216d25406dd2bddd89e345425fd168a0073c14fe7399b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/langfuse-worker@sha256:7f136e83df3914f7cfe9f2a3c2de5dfb0a4487c8980b3a4d78e084fe2e18d2b4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/langfuse-worker@sha256:999c08307ccaa1543e1360102a53a8561c1f09418d8acc355ca885d8589dfb33 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/langfuse-worker@sha256:a35915530b13e53a63d0f7f26ab73cf1e125e044ac82defed78180e3cf04cb1c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/langfuse-worker@sha256:3ab3ad56dc18e06e67ed7baf4a42dbbef24088f9630be985595813bca7e852c1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/langfuse-worker@sha256:c347c5e6f86fcd2639609fc7522d5fce28089b94b9394feae8d30e01e943e633 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/langfuse-worker@sha256:ef9ce95ae2afca853223b12f5a9660a556c9d1222a076b05f1cb3352361a7e6d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/langfuse-worker@sha256:5aface8497fedfdb8abbb006c388f094a12a3aa3ca428dbcf956399352b323b4 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/langfuse-worker@sha256:510b23bbad865bf6205579007164fd8bd1edf489e239a90945ec77f8723d1d2d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/langfuse-worker@sha256:9959491e6249e27c97582ef80473e6321e9fab43770c30344520ead66217b284 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/langfuse-worker@sha256:948aba2f4494d93c21ee1bb0733b6276d3086bb90100084aa56d1193949dad29 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/langfuse-worker@sha256:de7dafe3119cfa76052a2def83f2d285373e582d935319146f47fb64f36e00fb |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/langfuse-worker@sha256:1b2681d9fbf491379d4d7d325ae5bd89f3851a8dac043f081c849cf76b8d980d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/langfuse-worker@sha256:de731eab892fd793ea6d4765d3b99b5bee50c76531bc80f94db701e8839d4f06 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/langfuse-worker@sha256:736957efdd7df1f7bcd8322f4de15f3a3b34ab56714c1e819d7aabd39f6338bd |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/langfuse-worker@sha256:fabcf703040f40c6973963813b924206d51c5fa6bfce45480c6e740490bb649c |