Sign inSign up
GitLab Sidekiq

dhi.io/gitlab-sidekiq

GitLab Sidekiq 19.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

19-alpine-fips-dev, 19-alpine3.24-fips-dev, 19.5-alpine-fips-dev, 19.5-alpine3.24-fips-dev, 19.5.3-alpine-fips-dev, 19.5.3-alpine3.24-fips-dev

Index digest:

sha256:49a2f03407e3c03da78bae3ea9585456995c8fc7a44803e0181323eaf55d2707

Manifest digest:

sha256:2fe2edc56ffc353b4a12eb42a91b27be74d49f8cb7f256fcb9046d9e6d75fa38

Size

702.29 MB

Last pushed

3 hours ago

Vulnerabilities

0
3
6
0
2

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/gitlab-sidekiq:19-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/gitlab-sidekiq:19-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/gitlab-sidekiq@sha256:b42f41d23e0fcb9f8bf6f1bf124eeef52c3906be568fc5cc65559812848f03b6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/gitlab-sidekiq@sha256:8ae3b7e0aedec1b0caef7d66f11d10d906f4aa57efd9af9c178aa240caeef7ff
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/gitlab-sidekiq@sha256:917fa2382d5309c78c25431b5f6cfbfa002d84cfdb7ea79ff3c13f18421973a2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/gitlab-sidekiq@sha256:f2098775f85f0c66635ce67d0ed6a4913a0986e66d48ec98e6b0ed05c6769283
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/gitlab-sidekiq@sha256:f3ca5b91cd034097f8440a1ee5621e1ae06a6c5dbd003991708b6afc3709a2b4
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/gitlab-sidekiq@sha256:7f36eb4eca7f16a8428c66a69a89b5ecfe7d0d3f9f42943206fce1ff03cde488
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/gitlab-sidekiq@sha256:e704853dfd35f252a8bfde6ab63c55f7c262746902507ad811e78d433e5a06df
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/gitlab-sidekiq@sha256:2ad25dcfde55d04eec47eb5be64646624cad9863c85f85383b16fa4be7c12df0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/gitlab-sidekiq@sha256:2e988aee10a9b36271fafe4699505db1fbd571f0eb6b177d254d6ab6a20e2254
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/gitlab-sidekiq@sha256:d80628373e035db121cf35ac514621faa18f48f27f381e7a6a0acf8de54497f8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/gitlab-sidekiq@sha256:58c4739d0c4f69959c131d6019d697aac10f6f91f9af466a24255f3cd6e847d8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/gitlab-sidekiq@sha256:14c8c1763b93a1ad00b54defd1b4ab283672e25fd52cac05faf1f799ae276851
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/gitlab-sidekiq@sha256:9f7df1b3fac935e3edca6b55690f475436c01e6e586432f8346c8372ca7b1885
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/gitlab-sidekiq@sha256:2cf8bd2b73bd14e32e5f10e33ecc59d1eafad471fe43703000b2f4925a26ad52
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/gitlab-sidekiq@sha256:dde6ec971539850afca831eddbdaad79969b19d82839ca9f10cd9c9e3be94214
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/gitlab-sidekiq@sha256:b22c3f960f999f589c009dd9d6526769f43d7f91d30a698f6536b7ef9094e5b0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/gitlab-sidekiq@sha256:7513b509f1f067c8b66897713351b1b4c958e7702d4043b6799ab38a97056f04