Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 4.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

4-debian-fips, 4-debian13-fips, 4-fips, 4.80-debian-fips, 4.80-debian13-fips, 4.80-fips, 4.80.0-debian-fips, 4.80.0-debian13-fips, 4.80.0-fips

Index digest:

sha256:073685c4bb1e3ab39a1b126e0064d3e1f9545fd4b1dbb62039c8dba945dd2271

Manifest digest:

sha256:0bdb5017b11bbd1267906deaf889f0f08c95882885f30a9429cc7f24c20f2b39

Size

126.52 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:4-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:4-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:cca2c7031cdce3302318e27fdebb671457e1fee9d26cd339b99dbdc2b6e6f350
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:f3f5aba5143b618126434514afe0a6e14aaf35a4edb2adc1ccaf1591e508262f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:ed0bede4d828757fcbde939de7d641169f209612faee84d208319a8a3e6e3fe6
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:0cb42af597a3b4c1fd151607c157d35fe723f7a83c08b08bc3feb3d2a7d45ad7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:9a0643339033b53e2ab21b4677d59b359d354cdcbae834c29cc9c9c3866d1334
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:572dc96d58db3492ad89d8bea93511de81a5398f5bb3a31512a0b82ab51a27fd
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:89e6d90b9ee20c0980e01acdf0192eb7484615951ad24fb4492893c3d4b32ebd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:f1839cad498e43dadd64e4453400ab1550d6f43e9de1e49bef73fbb2e3e79764
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:d77e8e11bbf6808d2bcba1d7ca427d9bb2b261de7867e69d9f800da695121248
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:bfe80546c53eddc72ca5f498cffecc1b2a3d1740a6bd377618c2eae9dea9ed27
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:f67e8f3d8cfff40bde744a26d7930f80659e47c883d104204194b7f0fb38d573
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:acc5f50a68172eea7ffae6e3542140938081a211e3a90cecd918198935152f49
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:0d6594e1b95ba00ad682a18baf2af75be0eed236eef104b88a355976de273380
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:4d24fce84deed94f3e7d5f5db1da552149d817107f2cf6597fb5aac49fdaa1f4
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:261d2f27c2b46a430d600175bc4e77f070188bb18e3bba6c0f35989fe83d5b86
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:f169f05d2f796619b070e02e381805093ae3b2153ac753035905dfcf5eb5cf34
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:9dbab302958f3337309d32c24be7479a1a7db046edea1bb7bc090cf5c8058d2e