Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 3.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips, 3-debian13-fips, 3-fips, 3.225-debian-fips, 3.225-debian13-fips, 3.225-fips, 3.225.10-debian-fips, 3.225.10-debian13-fips, 3.225.10-fips

Index digest:

sha256:6957b4979945cff2a08ec863ce923e3eacf92f5c8ecae9f6b8c3cbcb13ab641f

Manifest digest:

sha256:f0b85ffcfbc6c6277aa46adf1e31170c6e41ba2342d51e4753d4c7ee40ccb22b

Size

197.08 MB

Last pushed

10 hours ago

Vulnerabilities

2
8
9
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:3-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:d267eed675f78093045ed2d1d64ad28f5de648952982eb19e24102b3941886fd
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:292bcd1717f4c412fd555e8c0fab333f9f8388386e69855747b8e22731b31e15
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:fe57869bfeb88046e924b87c718d89e5e5cfe0de6529177dcadf3f42ccd72b4c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:3478e50c2b7b55e0f2a2fd9b703a5c36ff3e03dccdf4063d825efc5c8ca8f7c7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:d9066d3eef8345ffb51bfa03dfbccfdba9984aabd86da0e1f7c7f429f7db68da
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:8b40132b08fda6bef3a4621c2604efa3ba6ff88a37a3c3d0642e0becaa62066b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:2f135f1e35e067bb8a8dc63adc15b97c0d790fc29dc3d122f485e41eebb6e468
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:880c347f689eb1ea9a8e877aec30728ccfa24aeeb76eae556643ea5730687a96
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:71076eba7bcb8feff4f945c8de63efdc604d7b2072a99c013b97c5bca19c0255
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:eba4e1dd16a37a99d40ba462687af950e472ec3e9808588b0b2e7a14aae3c25d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:4951165124598123ede607f4a0ab1c2c05e25efc27ec39f07109a87f88c469a3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:3acc1bfd6a714e13907ec451f71b7bad112e4d5c7f8f4a97615a1bfc5b3b138c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:dcfef55921d0c75911320a10ab74521689be5eb6099b78c7bcdcd2cf80170d30
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:e4290e5e68970e65d41a4200f3868d1122cf011f6bfc944183c397a31438d30f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:7927fe0a031395d648695e879e81cf78bfc28ac14b5de91bb2bcc1caa7381b5e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:5077f42fbf99c5e742f12a2023ca3577a25a5727f0067d42b8b7305efbac3e47
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:e9efa3878996980dcd8f410f6053dfa047d870fdf3bf653be693e532e7277a19