Sign inSign up
GitLab Sidekiq

dhi.io/gitlab-sidekiq

GitLab Sidekiq 19.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

19-alpine-fips-dev, 19-alpine3.24-fips-dev, 19.5-alpine-fips-dev, 19.5-alpine3.24-fips-dev, 19.5.3-alpine-fips-dev, 19.5.3-alpine3.24-fips-dev

Index digest:

sha256:f9a1ea12bd798814e3abceb01c81a3519b39693f9bca326da2724ad11213d7c7

Manifest digest:

sha256:cd0251c6a21777d24bc2a1eb949d05ba9c40f9167963d42449ce63a655743c07

Size

702.16 MB

Last pushed

10 hours ago

Vulnerabilities

0
3
5
0
2

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/gitlab-sidekiq:19-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/gitlab-sidekiq:19-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/gitlab-sidekiq@sha256:cd7c4857d7e2b6ce85bffa8a613c1438adc00d8978b929a023281cea3f57b7ab
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/gitlab-sidekiq@sha256:3f1e1975abc3d06f08c998a26330fb0d0c705a4f11f719db11d1a476923e7fe5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/gitlab-sidekiq@sha256:f9b370ab86adb42678fbaa90834fb633894088ed9ad0b46453d516ba09b59d00
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/gitlab-sidekiq@sha256:87e495ff4d4f9c65dca48a5a9120d7397dce68e8769b7170f386d3e3084095be
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/gitlab-sidekiq@sha256:2453483cf701b882c3bf84556006282c50554260c094b7a7aa2384912a8c8809
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/gitlab-sidekiq@sha256:d27080690ed74d18f972ce83de1c09f6755bd3735568a7c675acdb25a6be20e8
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/gitlab-sidekiq@sha256:c004b079f56e80f5fcefb34d251583129385877e372f4ac5af5913874f399071
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/gitlab-sidekiq@sha256:9e261ff74ed7f0e518506926c6bd4c82f14c502e81ad2cb88d3ae5ea04d1cf37
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/gitlab-sidekiq@sha256:0dd46ded327f3b68118b8f79638c97127e1bc327a5ce2c8f6201b0e29d242ab1
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/gitlab-sidekiq@sha256:a4e9f881380ffa88880513f7d59508e9ccd0ec3c5a2cd155943d644b23841810
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/gitlab-sidekiq@sha256:de3b96fc42b19781ad3ff43076c20aa63a216232c024e9d2d76635fdc86a7bc4
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/gitlab-sidekiq@sha256:d08f8316fdd8acc766a6dca69d6b24c6f57227bdaf8f01831474c609a86a879a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/gitlab-sidekiq@sha256:8cce45cb9d23c7774c02c81a24b3cad6de82472038b423733d87864e8fc4a026
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/gitlab-sidekiq@sha256:472c2d8e572590c1a6f25335b8cd46872d555c738de7cf5f1c01572f060721c4
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/gitlab-sidekiq@sha256:b4096efc205eb608c6e9f805b1d2227e8203f9b1532a7820cdfd52ec7e984787
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/gitlab-sidekiq@sha256:63f9ba328f10391c05a31354396f70791b6d43edfc7be9a82604eb3ce036d025
SPDX SBOMhttps://spdx.dev/Documentdhi.io/gitlab-sidekiq@sha256:8f93ba8ae5ebeefa8b08fec8bd872c2d5315c710d0eb31e9bbf6f2105d0e6870