Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 4.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

4-debian-fips, 4-debian13-fips, 4-fips, 4.80-debian-fips, 4.80-debian13-fips, 4.80-fips, 4.80.0-debian-fips, 4.80.0-debian13-fips, 4.80.0-fips

Index digest:

sha256:51fb0e4c317550ee6466656d1ebfdc840ee58121a7578832d5613fadf405cb68

Manifest digest:

sha256:10e166d544b9c5a9da56234a1def8431fccbd09a8a6e820ea77747941be7cc19

Size

126.58 MB

Last pushed

23 minutes ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:4-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:4-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:784fb39df47644dcf624346f99caff4fad36d68430c2f41759a081bea58835bb
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:4efbe598fa300ce5f3a9f1a99609d0712ed00b90c63fed4f4a343dc3e9263e14
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:33ead064953b0483a751150cec7333f4b7e021509ed14031bb37b8d4aa70b26b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:4d221b72b684782a324a8b0f5aa57cfbccae1697cec16ede125ae5e251936942
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:1fc83dbdf66416a268fe619f514f26cbe71a4be8647230238d5c9ec33d3af022
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:70a162fbb86095a163496c843dc350059761218ed162dc52d7f22fafbd748510
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:fc59e6459fd32da53127cbff57cd81f4325aef37fde90db5548fb2399d30d858
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:c73cf309fc211b06836887f112a8748be813419b5c29c947ef1c71503d84263d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:4e5189c306750901238c4289d5439e0fe6cfc9f7e7ff5aaf1aa427e871cdb2e8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:4c9b561b4842f59b262706ed8809a2c347618578157bd8ed107cee95547f8fb6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:912072ccdb4f033945f412cee8f930bb60f18b5d1d724afcc856581469819a9e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:d95b5b420669b73b78f061768502cd29fc71b286589985b35d31bbe53533e37c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:d8a5f6f25e968626c1824b2f1bb0fabd2616d463b417e411c882d2932c3a1c01
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:2e3990012825138385879184bdca43a3c751b290005dcaa58854ae713cabd3f8
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:3fd1091bd808886c97a6022f414c0bf4b6ff80e2a6604c6deeee2578fe219e06
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:25a48f42aa49c0e66c469089bf4db1478da65135fd0af383d28af2c928b67101
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:bd1b52188b3f3ac7dde54b208b72a231395242eb537c8c8b26b5c14962bc3b6a