dhi.io/mediawiki
1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.0-debian-php-fpm-fips-dev, 1.46.0-debian13-php-fpm-fips-dev, 1.46.0-php-fpm-fips-dev
sha256:7cbd5af348c6210c79058739abd2396fba9783ef08241de050711266c4c5ae52
Manifest digest:sha256:3e188f134f32df04b7eec552386612403f35ab6577aadbbd91c2bcd7c2076942
Size
158.21 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/mediawiki@sha256:89070af7495bf8a344a40fa089618054f685b4312a0caa857e52bc944b7cc06c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/mediawiki@sha256:e5b5319512e3acd68531cb63d9f097d19263f770e2b73ecf523ee8043b0615bc |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/mediawiki@sha256:89f39a577df112fa3e4c7a25e3c14f6f5813f739fa413e0f20f120d54bcefe6b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/mediawiki@sha256:44cd9a55572767bacf9ab0844d7bd75160f43e3e78152b58ec2ec1512a42edeb |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/mediawiki@sha256:de7ac504f3758cb24c2d8691360ef80a47adbeba2fcc26ddcfb8dee39f9ded07 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/mediawiki@sha256:da2b8bdf2e29157fe308d262c97849de6d2419344c91914547c97448d5197b93 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/mediawiki@sha256:7edcac344b914967eb06b1a8fbca55f6df2ef8bb15d8ab85e5518ef14669fb4a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/mediawiki@sha256:84f0de158361bb72cd90528b34c8bd3162654705e0b0aa9d0738b1648cf291ec |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/mediawiki@sha256:0872559911c09f9fb761ef0161821daa6cc6390a35f6a72326b19ff245afb6a1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/mediawiki@sha256:278e2a166c49f081dbc1541e02fcf33b0ac726150ca62e1a7641bf7d715bb11e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/mediawiki@sha256:93903917705b147b01a152e146fe57e7488c0059c11678774138aef4680b007e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/mediawiki@sha256:e52f5fe73521e299be48c22920b3112ad3b7083a0ea60b6110b9d96fc98afffa |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/mediawiki@sha256:708a70d0d426dbc61b397561b69e5ff421b78e7934e290c8691b6bed563b5ca7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/mediawiki@sha256:5b50ab43b14ac83a767bfeec0dbe59543af8670f5f59695579999611f943ca40 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/mediawiki@sha256:920e0ea9411a1d1b43aee9b1d2b37340c91892c1b447d6451581d29a4b4113d1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/mediawiki@sha256:d6cdb99d7eb11cdbb6c86c81aa1a5e7549db67f699b4af2196aa9e844ac57ab0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/mediawiki@sha256:3e9337f5e6f812af10a402d749036170407cd3ce331e3050deedfc3a8a666e93 |