Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 4.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

4-debian-fips-dev, 4-debian13-fips-dev, 4-fips-dev, 4.78-debian-fips-dev, 4.78-debian13-fips-dev, 4.78-fips-dev, 4.78.0-debian-fips-dev, 4.78.0-debian13-fips-dev, 4.78.0-fips-dev

Index digest:

sha256:7bbf395cefdd8f6d6c986f747fc2793e6f63cffab8b43980f7a61c863989db95

Manifest digest:

sha256:92fb786d956968d7074025565c97876fe1fe6b7969c4e9e16792a569d041f3d3

Size

140.50 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
2
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:4-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:4-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:6b8e3b656cd6141adfa0cda4e66a3f4f9f2b64fc5848cf1184024502d1d36137
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:ef5c1dc2a90741de84a03d57a522229f88f7131159ecac293ae09687e64bbec5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:a350cfbe4be8523609a83e97aaf71b348d4fe19045c889ec84a496996a7b943e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:e69d35bc27fcfe39aaac0621eafb2bd53e5b6d0bd8327132ec1548477b3995e7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:48ae4d615c1ce3aa49042814d596eba7db52781ecf0543ccbd3cab3aa5256eef
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:7319d65abfd94c3ab244dafadff2623eaf91778853b714373e00346c332ef29b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:268f2330bbd90d68a945015e3a0498a19eb5991f161acd3455a8365a1957e981
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:a2f250e6db7bfdf0c79ad0faccd8e566e437a507ec91a4f2480014cfe454aa96
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:348832865a5518f4e0a0a12481f6458270700c6343465f575a37dd61e95b151d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:fbe981cfc53ad4761210499bbaa9d68aa05bb3f0fa91c68deb218a69c9637502
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:d41af977f22ee07b9bbf714515022a7bd7784bff6f6af5960045fdc2e1c11065
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:297cd92c4a87bbfd5276dcd88485bcbbe4db189b6167271d7f8ac8b2218cc5e3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:425f023e8080835dd3667f4e1ec52c91cce59d1a86b8ca439cf7db5233a27b76
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:f2d2bfe9ca04115d462ac3c2460804aa1e2e3b1a057d4365441bafb0438efc15
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:d0ffe192a7d6596afe7d459d254901f88d5a9dec9d51ced24cf042c95f29ac77
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:9db0fc6f75db418d51072b63180b4cd765dc159ca9e7d385c95998798d279012
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:ac0db14ad576af8735c27d19e30b06015e09a22599fbea1571d3c6aceed1f161