Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 3.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.227-debian-fips-dev, 3.227-debian13-fips-dev, 3.227-fips-dev, 3.227.0-debian-fips-dev, 3.227.0-debian13-fips-dev, 3.227.0-fips-dev

Index digest:

sha256:5c7526b2966de0c6fc0a299dd9a6115f30361e069ebc2209057aa905333486a8

Manifest digest:

sha256:b07c84d6dbdaf9edf358290cf446fefc3ede5516b57d1908a96f5b1134e3e649

Size

211.87 MB

Last pushed

13 hours ago

Vulnerabilities

0
2
11
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:6af6878aced4009a75ecccb800ee2036c939b4245a3e8d67ef2125ce992d87e2
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:f3c2f49626a9c2adbe893b0c78e918fe81af804c58377b068dc4b218f33100a3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:b897dbd219c47545c71aba5bc6bc8ad67e0f52a7d1709c20a5ea0855cc159d48
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:1534a8e3301128202886ac688c3adf3744b3ee08027652dc1ac221db9d137a8b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:75aafbd45ff9727b4526d95beda0be637da1f58f5f9c0029e115c170645f2938
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:05b2f6b095a60ba854c372177bb6207e207c8bda2b06d71be8b1944ae476b5f4
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:3aaedb78e8f079dace8bc7bad26b437c86d6fca8dcda195f99ef6017b1459ae6
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:6db4116318da53a88f91ebc92480673534b933b7897e005bcf78250f120d91b1
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:e10258e11680d6c9ceb4b812f5532d2cef62f52107ead175ad5feabce56b36e8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:8d3e340128335169ae4fdf4834d6c8ac2b9cd44a6819448da621c6a7ca0424dd
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:365118ab2e71380565609869dafc3bea53db9720ca4da74241655724aa9c7776
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:750edd8532ac801b418af2faeb5f9760aabff8d1748cca50a8d19dbd33e43ed2
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:c77d068cb50848da9d8e797fb72f3118ce1ffbf397df3de1d56cf658a0b48974
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:11d17d79d0306bb9043565660c6dd0893311333fcb3b364d3c977b0b59c95b3f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:001e585df17c441a4bf4bb8ffb7f2fe5246ca8d04ce0451ac4a2d29c850153f7
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:2d0f25da90c192980fb87fcc8d5c9a21b820e572be406809450ee477a4f6ac1b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:41790f09fb6309a7d0bfc87805311b6986b8a85dc6c247984e2f26ff3ebe0a4c