dhi.io/langfuse-worker
3-debian-fips, 3-debian13-fips, 3-fips, 3.227-debian-fips, 3.227-debian13-fips, 3.227-fips, 3.227.1-debian-fips, 3.227.1-debian13-fips, 3.227.1-fips
sha256:97ec6c7b46e7c9d5b9650d0bbaa35da4ffb7971f3d3ea2a036edc4417d7f2272
Manifest digest:sha256:8082be84e6978531ec8beafa54e6b9f6680148eb914d4703c06368e9573171e6
Size
197.85 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/langfuse-worker:3-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/langfuse-worker:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/langfuse-worker@sha256:5c7039af09dd7818ad31f06d7d4a9d3acfff11287c7ffb24afffc38606cdbedd |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/langfuse-worker@sha256:dfd894cff96952200fb5385a6e5afa054eed01621b18e2c62c0b2a9f623cf110 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/langfuse-worker@sha256:a9c84cb5456fe85e125af2e62a8f272fbd84505aff8c6b805b7c5e78068527fb |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/langfuse-worker@sha256:ef3e9c65ffc78122c9d3040312d9263e51a42939afa2a476567015dfd3911d42 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/langfuse-worker@sha256:8ba15c683c881175cd2f5b9505553a2c0e7029016a85642395d5add52627ebab |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/langfuse-worker@sha256:4455e2e64a96f5e759bf0f3a83667f412550affbde9a82c6c59be38fbe684058 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/langfuse-worker@sha256:ed03665bd229b034df070253c1ecba64f097c119282d8d20fab7712293f1498f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/langfuse-worker@sha256:897c7591b1e45acf56a2ae87821cfbfc881e083f26e8a83120fb951c35ab0bb0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/langfuse-worker@sha256:569d6fdc6c1a2d80e96edbe8f4cbb896515aa7d2ff6e6919a7fabd1428c3ef34 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/langfuse-worker@sha256:55030fb8a055ce0b40de5fec6dbed3882125c615427f81f9cff8dbc38e29c8e4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/langfuse-worker@sha256:6758041ffd53e302bf9b178b80bd2a72c88132661627b3e33d414ac135ca3b9e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/langfuse-worker@sha256:72705982609b4d202e38fa03f1522877840923d869a5087e4b1ca201c0f4cc5e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/langfuse-worker@sha256:19669d9135a8f76de8fdee31bb034304f7068f0f9e51c70941d8ee26e14d1d09 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/langfuse-worker@sha256:beb7b8be06c98d9b9b90326ff582ce8a2ca27b0d7cbf3bafda02f7f704e2253d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/langfuse-worker@sha256:bf02197b586d51ade3ce36c0e603682301351f6c3b03616e24a163b64813cc45 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/langfuse-worker@sha256:4fefdc8c5054fc920d6345cf3d32b45dd6a253f2f7339ab6b4ae79edf98eec5a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/langfuse-worker@sha256:9f68c59c2cbd86cec9e1fb61edccd1fc090fa795ec38e3ab7deb38e54b22ea62 |