dhi.io/langfuse-worker
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.227-debian-fips-dev, 3.227-debian13-fips-dev, 3.227-fips-dev, 3.227.1-debian-fips-dev, 3.227.1-debian13-fips-dev, 3.227.1-fips-dev
sha256:db2ce26b7a21f6eca3d3895958bf2d382a8243e0ea885828cbd7030a57a016f0
Manifest digest:sha256:b786ef1df41d6e859e9bdceab4a28cf1d9ad57e9807dbc2cc3d966061fc34f9d
Size
211.91 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/langfuse-worker:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/langfuse-worker:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/langfuse-worker@sha256:1bb91dc07835a61116623ec77800a669f569592ff559f25de69237df3bed0464 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/langfuse-worker@sha256:77e34d4a65b9be4d823ff4b22f318b43e057fabd0d3809f9fc9595a9bca5f8e4 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/langfuse-worker@sha256:29d7bd44b5cafa67ff81844f6208e152f6ef7f7a47acf48ade007fab8baf4ce6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/langfuse-worker@sha256:e13f6631df5c0c9c6372aaedd6dfe7f9a5d6074f0364189f2eb5b6df0ebce5e8 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/langfuse-worker@sha256:b377535ceb83821c14dd06cddb3d96d0eefe5d21b117c842f7dab6abe6f7ecb4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/langfuse-worker@sha256:51746083a6b4e96ce1516cfa7bf8f6819dca8c437798f04deaafce04f6a62120 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/langfuse-worker@sha256:570ab6b1bdbbe4ed0a4542620f7b6d77c106f23568f91402d673a2560ffe8995 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/langfuse-worker@sha256:248232c8fdbaf55efe3b9b5c97d78fc14ae131760997df16e5ace163820b4f55 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/langfuse-worker@sha256:d6d5eef80481d4537d37f8d7fbd31d96278e1315de74714f3992dc051ccdeff1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/langfuse-worker@sha256:9ab41994b976abfcfb89199b53b180e970de1091e3d2b326e0bf8d5684d1826a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/langfuse-worker@sha256:70c2d9d2b18d472e00e2209ad791611144236d27948d57412b32ae15b4f474af |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/langfuse-worker@sha256:cdb59a0ac71452031c8787100afa30fbcbe01abf2846d9756e577e8803a6b867 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/langfuse-worker@sha256:3b4f69693ce5a3bd23d5cb4d9fa484f2a6d6086896dcd66cfdaeb09cd500ee77 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/langfuse-worker@sha256:80c1cd2aa5f89baeb271ad22620c1dfdbabe0fd30ac7ae1463700c3cfb13eb34 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/langfuse-worker@sha256:14eb997e54f485eaf9e08095165a42cd3fe0c2ca1801f285dc9c32829b2747de |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/langfuse-worker@sha256:d206e9c75e50d379097ca316212ba46702b9e4dde4aa7fd3198029acb88b5efd |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/langfuse-worker@sha256:c62d571aa449f60c979688db19cd43afd5b5d7bae83acba8bb00f18f35e35d02 |