dhi.io/langfuse-worker
3-debian-fips, 3-debian13-fips, 3-fips, 3.227-debian-fips, 3.227-debian13-fips, 3.227-fips, 3.227.1-debian-fips, 3.227.1-debian13-fips, 3.227.1-fips
sha256:69285ca4f12f5b44f75c29481a84a2014a55ffd703dcff9c7d6e7c1d761f1263
Manifest digest:sha256:9045bb0745e39d606f7048b0843ba4a762f3811013117ba1b07415c382985c2a
Size
197.95 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/langfuse-worker:3-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/langfuse-worker:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/langfuse-worker@sha256:6e2a3517efd3d867bac659deb6bf71435ffc52a32176e85059df00429a7e80f2 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/langfuse-worker@sha256:b812ce6265ca1969e4ff84627a4a1e4ba85f79bf0b4b40f319c755e716d2dfd0 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/langfuse-worker@sha256:84c5e78a34eed21d98ca2c784860680aaa260dd2a4b88cc588e24453c9a1b39c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/langfuse-worker@sha256:91dd9017b8849f7ebe79fa744041bfc1cc26452bb8e32c21ed4b275b35d333ab |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/langfuse-worker@sha256:956485b50d83849c58f3e1ddeffece4c55dd6e6796362fde141ca67b07066ed6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/langfuse-worker@sha256:0cc5da0f9956fc0612e51c8d5a28ecf3aa50f965c180f04ce7df8e5f7442b4c9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/langfuse-worker@sha256:de644912f7b855f398e5f6cdb4148e319d3e92697c16b27ff1dab5e04f7a09f3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/langfuse-worker@sha256:7bdd721f513176cbe89ad550ad0b198ecc8aa8f0cbd436f754a9a3f633e10afb |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/langfuse-worker@sha256:773082dcae3620f0d8267b72f7db96093cf792b4de87945d1b972fda7359e34c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/langfuse-worker@sha256:a09b19163346fabd2c49e6b2ee92097360fca6c12b1e47a090b5cde9321cda8c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/langfuse-worker@sha256:6c88bddda6329d8bd8442700f18d7fda2cb858b7906a50417e8b0d870b2bba91 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/langfuse-worker@sha256:f62071a1f930b5cfc5d8a7a4b05d6ddf8617eccbdf862b40119277115696a138 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/langfuse-worker@sha256:dc2419b729bfe25ae90a5390dedc381554a91bed54af69f6fe196d366a9499d8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/langfuse-worker@sha256:6b19efb6ddb1c65cf1a7d9b0034690a4cf293c9a20f56b85c42e4118b078b7be |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/langfuse-worker@sha256:6a6b7535e78336997187768d1be4ef8d65f5a7ad2cc46569909ab5b251af1938 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/langfuse-worker@sha256:e6ed91914704de2229a68f9560d1a365ab9e2422817c8deb004de64c127b53f3 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/langfuse-worker@sha256:5c1eadf2cc4d48169650af11f20fbf5faeca7a19df57a0d2ffea4dd4d4243870 |