Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips, 2-debian13-fips, 2-fips, 2.95-debian-fips, 2.95-debian13-fips, 2.95-fips, 2.95.12-debian-fips, 2.95.12-debian13-fips, 2.95.12-fips

Index digest:

sha256:0bb220248c7d71781e0381bc0950308618d0736dfb3adde275904296a6b0f166

Manifest digest:

sha256:faca988112e6cd1f5e0965880e19e44b62ddf3af207567b6233488795d29df71

Size

192.40 MB

Last pushed

14 hours ago

Vulnerabilities

3
4
7
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:2-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:5f78080d4757a4884ce965b3412183d25769838c44f7a75cffa2cec168a05a0f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:985cda7901549649e62edfd34beed0ed696ecfb4805d6a0fc68991269b584db4
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:83cc357847a02388c23388244290f4e64c0634eb740e9810e158368f017fff33
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:dbd823ce603cd14c8fddacf9aead1f6d8e23ed004cd1f4016ac9594c7f554c6b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:576ada6c91d18576c0a51de2604d28fc4071bddc8bee0844f997a050e5fc3c77
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:c84ea7100991827c85c489ad3dcdea7c17c5591f0ddb45c2b1fdc23fcd438673
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:19a31bd5613bb2b96d1524d6aa26ab74291aff89208ecf70aa488bdfca24b4de
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:05abc9dfe304e26999a866e6adbf29558c82e3d5bca104ed0f7de6ab4d345d97
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:ef3759575282f07e6f3dbf21811b50f76a0ceb287473019fd3c27e6567b018bf
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:7c44f3b5a1c6813a83bb3ca670e01e23f3ede0541ed0ac7a59ca92536b530f1d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:612b31272b598f0d2855c3734c01a482095ec44d197b282bc448cadc6b0046c4
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:aca6cf974f5a1aaa61137f7c84eddce0e9197981bdcee930087b5ca0295db991
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:17763e16af5525a73fbb9f1f3480bc616d398e688bd3d18e7dd69edf4df09046
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:d89d953c49a8fd9eb3a36d55a83a034a1cd45871cd8d2131031d9c70dbcf6d51
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:edbe18d8669c9bf5bd384b1ffab8783d602c1db24b97207613547e4218608899
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:ae5769d70bb4a4fdb06e5d9e74c99ad8c0fa4b0cdacd3aeb6d50bbcc062ffe86
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:444489dd11af948035f3dfe14ecb334daea749144060031c4c829b548ddbea10