Sign inSign up
MediaWiki

dhi.io/mediawiki

MediaWiki 1.46 (php-fpm, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.2-debian-php-fpm-fips-dev, 1.46.2-debian13-php-fpm-fips-dev, 1.46.2-php-fpm-fips-dev

Index digest:

sha256:35c5ab994549b9aa24775bff657b713ba53f63e868d55189660cd9217c05e542

Manifest digest:

sha256:b29cb5ab57a605c53acb6cfa9633f34d726b8e791fd75383854832f8e8bf9762

Size

158.81 MB

Last pushed

4 days ago

Vulnerabilities

0
1
2
7
6

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mediawiki@sha256:cdc91b3462a9698cca3839c12fec033be4ca03df73eceda627a849e32a9faf51
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mediawiki@sha256:15f95dbafec246684954bbf74edb91a5384c689d6f527ccbfda2a5b3390b4f27
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mediawiki@sha256:e754ab51e5d3fccb2b4416c3c429d1a3512aa0ef2f80676e64b4f85c814fb0b2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mediawiki@sha256:a05db24a876f12412c7af8afb03be6b0ce6b1e6e43265f9fd5480d0c8a56eced
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mediawiki@sha256:84582cba6b3a84c4557a486e265fe2c985dcc141facfe68080f1849aa065b687
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mediawiki@sha256:5b672aac92545028be5f0eda7ef4eae13af4e05d454113a1e9e4cabf681975ec
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mediawiki@sha256:34df5b19f88328119046b88915135ef5f6033eba4dfcf32ac5d73764eea22d38
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mediawiki@sha256:1f8357b14152eb4029e39ea98224a4b5e1f9db74e301fb69fecd3d5025dff49e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mediawiki@sha256:836d7e287c3ba7e25d13e6284a35d834d083cf4801e714873cd6c0085af29dfe
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mediawiki@sha256:9cf2d2679b5af0786bfb05df45ae2a20be8169036fa06cc25c02bc4291bfd6f8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mediawiki@sha256:3c22c4e1e0e0fe52ff4560db01049ea6af22e133484840c3eabb080f332a68a9
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mediawiki@sha256:f360e21decce4ec493da9c51547d07a6dd4fbeb0b0b83d4340b68091b2cc94d5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mediawiki@sha256:1ad7e941fa08e71cc0b783b67ac7c004173fd2ff4860bb1a6b41e4244cd4e0e8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mediawiki@sha256:db7d1e8bfd28f36369f372b46f688273b1c2bf6e2715abcc634d11d38962e59a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mediawiki@sha256:9a14cb004132c340524b3652d5c692416b32c7adc357af723a9b3eeb447aa9ed
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mediawiki@sha256:71aa60c2a1c867ecaf8d0c355b8f7ffebb7fb1e2b8ed00001749602ecef00f7a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mediawiki@sha256:a5cbe42160df99b1eed82e3da244c553037b53ca9bd5005acbb802789f030d56