Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 4.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

4-debian-fips-dev, 4-debian13-fips-dev, 4-fips-dev, 4.78-debian-fips-dev, 4.78-debian13-fips-dev, 4.78-fips-dev, 4.78.0-debian-fips-dev, 4.78.0-debian13-fips-dev, 4.78.0-fips-dev

Index digest:

sha256:7faea30fe4c55703d03e36eb63933baa0c5f3e2cbf7d75fa472b2c618e9aef08

Manifest digest:

sha256:35efc3077171da8dfd611444f49e9dc1f3e11cee8b56165c431b8f41b088139c

Size

140.37 MB

Last pushed

12 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:4-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:4-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:32323932758cfcd3763c19af54b8ac4077ffa01c5b1d68e0090c7acf28d03aed
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:c78416b8b33b00af5fd6ad7dea4859a08569fd70c645a47cc1f3ab0bc46751a4
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:cc8e8df8c0b549c04302b85e63be598ef992a3fda87193c9db8a6262d132bf54
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:f0c3fef0672e93ac2cacc11b5a64793aaaddb5277bdfde16f837d2142683bb76
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:992a102156da4ee92576cbfe7bd98136a05a6e93263b2d46b16e7990c97f3af2
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:8dee837c0bbf59cdd1758eab31123cffd3fc97e5bbf975749a2222def3e694ca
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:5d61a2b2b249b571bda612cb8193bb4e8963b9f744ff84a4789a00c7d2de26ad
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:f9b669a0293361256d365eb68e085aae992470536a8e0e36d20f91f26d6d4bf2
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:fdaa3a5ea087679c86ebee427425d713b5d36ed8a4af4e731cbd5e3f434a192a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:b36ca0872cd4e17c6879fed4d5e0448e0a0e5838622f60b0dd790b4832d9d96d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:9091675be231559b017c936333cf62feba695d2211001b57faf6307998170f3f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:b3eaa093fd2825a950d3c22bd7b5b83e498af785d9b4eb066fd0f2c402430061
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:e30abeb2b4a0b6324a69858e945b8ede6ca5e9632b0b35d93133218876044ce4
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:80c5963dfbd23159cf5cc0895bc317bdaaf6434477ce24d69bb69b7d56565d64
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:2e36005f5261058450281b7d4e3bf1d5365a64aa80d69baf1d4f6b4daa131f69
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:5e99b9313f3641ad48f52e69b92af295d927161d4d14e7d3d7767be6b9eb0398
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:37d773080568627b1fef20692ff350e4bda460af50b04b7045cad647038b246e