Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 3.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips, 3-debian13-fips, 3-fips, 3.225-debian-fips, 3.225-debian13-fips, 3.225-fips, 3.225.9-debian-fips, 3.225.9-debian13-fips, 3.225.9-fips

Index digest:

sha256:5524a6de36b428e8e0a10aef5950c4362c7cd3a48386fc0d3866d358ec5fdc8c

Manifest digest:

sha256:ecfa7eaeb02a1cdb14dc4500391949985941078c44950ca7d907093009a327b0

Size

206.10 MB

Last pushed

8 hours ago

Vulnerabilities

2
8
10
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:3-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:f938af093c38b0fcb7c27ccf931a5649e3bba4c619d1b2983aa9208201051c98
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:50b39d7c515580fc26178efef37219fed136f08c08c1fe4bce7c55e47478dc61
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:93ef4e3f08c750e3d2ecd2b0e6ce7aacf0cb143fcec56945fce2d995383bb42e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:ddf7f3299a10ec28041239f8267dd8202621056142f47479b289b5984f76c908
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:ec895d08dd4dd86385d6c2d1698054c572803b3c4996d04cb5e51c00a175a272
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:d5db0f08d7299768f8a3dccaac4a232ea061be403a8ac978a73f17217095ce6b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:f7fc09a083ef2e2f6863fc38d356a85f47a00a65dd2ed1fb408ba5c6c7f539f3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:dacebf13d192683178af1de5d3bf6322896e703255c15e12db830dd1d592e413
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:bf765d3bdc945be404d7ddfe504a18a3b2880d45632a2da391262bc6c792be92
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:3e9c090d1451fae1ac7a9d076ba1a6d0f65f8689679297a074b4878dbfffcabc
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:2f96f5770043722bd1a2073e79a34c049ead0306f51d19c59a58aa43eb3e8bdb
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:47d2ace1d9a3d3febe2d53ecb03702b39dc05ace1e8c6cd9c61de4a7420bbcf5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:f93de03c98a850b0a163b976d0b72ae76ecb71daa7ef4be00f932657ef1e5898
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:af78f97f630a3c044bdecd62cdd894085132f874ac9da06c4d79fb776f2f659e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:4747e2b2fffbacc21dd1e195cbe7ae6ce6c0b7a982173b43b58c3042b97a57bd
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:1fb32365149d20e933b83fc2a2b59b21fcad5a8a6a4477db305d6c74ba43f688
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:8e2dddad6786b18b98d270c83a0a93d8da9fb71dfe87afdf7ccc1cddf1400f2a