Sign inSign up
Langfuse Worker

dhi.io/langfuse-worker

Langfuse Worker 2.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.95-debian-fips-dev, 2.95-debian13-fips-dev, 2.95-fips-dev, 2.95.12-debian-fips-dev, 2.95.12-debian13-fips-dev, 2.95.12-fips-dev

Index digest:

sha256:e3b49c158b2e2f2b9558863977d15b6e6e2fd62f53202b25d660ed11441ed556

Manifest digest:

sha256:d6d2ad55cd0be18dc38ac6be9fac9eed60c0168179880dedd5043bb511892b76

Size

206.67 MB

Last pushed

14 hours ago

Vulnerabilities

2
3
8
10
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/langfuse-worker:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/langfuse-worker:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/langfuse-worker@sha256:ca238f52f6302d50b09328190e69d3475916f6e46fefae969862f427ec4d8bf7
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/langfuse-worker@sha256:1088ec906c2660b0008298e3023c1d8ed94f0a9ec9f2eb90e12d7bdbb51d5430
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/langfuse-worker@sha256:a4f12515a6fb1b1fbea7aaa3e80f56a2b42455b475047662700e93a1f65e3fc1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/langfuse-worker@sha256:98eff3a77607a53302eea1938c167df3fc8722c0d10486abfc36f5c06cce6816
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/langfuse-worker@sha256:285b3a93f89bad4b56bd13ffc1d76e8e5d239186116016549e599611723a515c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/langfuse-worker@sha256:13c8578c8be24f61d1e3c27c853c1443579feccd555c3bee3cc74bcfbda7f683
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/langfuse-worker@sha256:8bcd5344414b7e8a77d0ec12af2b2024ff705728b974a0f3053b73c2f367fdc5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/langfuse-worker@sha256:7127040d6a567be0626e3fd73f0bb4cb9cb44db1fd41b225d0395704c18b8cce
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/langfuse-worker@sha256:6c37237b16dc6c68e381141a3178b2a92ab1b70ef53601617fd7334e70a60b26
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/langfuse-worker@sha256:17c8b4111695df9a8084cd6ca5921b9f4f8aa21af80438babd391e153af420cf
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/langfuse-worker@sha256:3aee98ee95e595166987794075b14b39dd4b8eca8700335b8d1046e469808069
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/langfuse-worker@sha256:6ffb9bd5eb38819baf216022c55ce5eb0dcc1103e10f570492c6050793a0a0f3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/langfuse-worker@sha256:5af0205f6d51923662c359b876355f5c413fff029f866b1f84d316b77085ca1d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/langfuse-worker@sha256:c07cb4bd2fd0d7aa0b27dcf2f0072eafbd8cd1c9c7b2d49c34f6ed61dcb4c251
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/langfuse-worker@sha256:0cded03c4fa58e217ac534c79a257820eb2966f23ea4ae37bed848431806bca4
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/langfuse-worker@sha256:4682f6c460e39d64cbcbdf9b6b9263c4245bab51c46bd586c8cdcdb1703e1298
SPDX SBOMhttps://spdx.dev/Documentdhi.io/langfuse-worker@sha256:f0dc97b7324cee2ec5cf720a2c3dbacc3ec7932704dffac7110324338d453091