dhi.io/mediawiki
1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.2-debian-php-fpm-fips-dev, 1.46.2-debian13-php-fpm-fips-dev, 1.46.2-php-fpm-fips-dev
sha256:35c5ab994549b9aa24775bff657b713ba53f63e868d55189660cd9217c05e542
Manifest digest:sha256:b29cb5ab57a605c53acb6cfa9633f34d726b8e791fd75383854832f8e8bf9762
Size
158.81 MB
Last pushed
4 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/mediawiki@sha256:cdc91b3462a9698cca3839c12fec033be4ca03df73eceda627a849e32a9faf51 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/mediawiki@sha256:15f95dbafec246684954bbf74edb91a5384c689d6f527ccbfda2a5b3390b4f27 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/mediawiki@sha256:e754ab51e5d3fccb2b4416c3c429d1a3512aa0ef2f80676e64b4f85c814fb0b2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/mediawiki@sha256:a05db24a876f12412c7af8afb03be6b0ce6b1e6e43265f9fd5480d0c8a56eced |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/mediawiki@sha256:84582cba6b3a84c4557a486e265fe2c985dcc141facfe68080f1849aa065b687 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/mediawiki@sha256:5b672aac92545028be5f0eda7ef4eae13af4e05d454113a1e9e4cabf681975ec |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/mediawiki@sha256:34df5b19f88328119046b88915135ef5f6033eba4dfcf32ac5d73764eea22d38 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/mediawiki@sha256:1f8357b14152eb4029e39ea98224a4b5e1f9db74e301fb69fecd3d5025dff49e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/mediawiki@sha256:836d7e287c3ba7e25d13e6284a35d834d083cf4801e714873cd6c0085af29dfe |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/mediawiki@sha256:9cf2d2679b5af0786bfb05df45ae2a20be8169036fa06cc25c02bc4291bfd6f8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/mediawiki@sha256:3c22c4e1e0e0fe52ff4560db01049ea6af22e133484840c3eabb080f332a68a9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/mediawiki@sha256:f360e21decce4ec493da9c51547d07a6dd4fbeb0b0b83d4340b68091b2cc94d5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/mediawiki@sha256:1ad7e941fa08e71cc0b783b67ac7c004173fd2ff4860bb1a6b41e4244cd4e0e8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/mediawiki@sha256:db7d1e8bfd28f36369f372b46f688273b1c2bf6e2715abcc634d11d38962e59a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/mediawiki@sha256:9a14cb004132c340524b3652d5c692416b32c7adc357af723a9b3eeb447aa9ed |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/mediawiki@sha256:71aa60c2a1c867ecaf8d0c355b8f7ffebb7fb1e2b8ed00001749602ecef00f7a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/mediawiki@sha256:a5cbe42160df99b1eed82e3da244c553037b53ca9bd5005acbb802789f030d56 |