Sign inSign up
GitLab Sidekiq

dhi.io/gitlab-sidekiq

GitLab Sidekiq 18.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

18-debian-fips-dev, 18-debian13-fips-dev, 18-fips-dev, 18.11-debian-fips-dev, 18.11-debian13-fips-dev, 18.11-fips-dev, 18.11.14-debian-fips-dev, 18.11.14-debian13-fips-dev, 18.11.14-fips-dev

Index digest:

sha256:7838be34edc29d4f0afb41b334ccc4cc8e58f842b8b6329b8dc9d1b33446141b

Manifest digest:

sha256:0ba380762592b433b06918e0ad64e7c85d40818eda79ef70347daca0fd8c1879

Size

638.16 MB

Last pushed

9 hours ago

Vulnerabilities

0
3
11
14
2

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/gitlab-sidekiq:18-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/gitlab-sidekiq:18-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/gitlab-sidekiq@sha256:50a12e8f9b4de8a2fb38857492107cbdea89e166399170d1211908855ba7eaf8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/gitlab-sidekiq@sha256:54fd657c18d7712b8abf697b58c3a40a532688bf8d14d6af1912f14cd3d5674b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/gitlab-sidekiq@sha256:5bced14531ed3e0d9af8476a28769160d00aa6d00630959d5c2f17c089069300
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/gitlab-sidekiq@sha256:d2aa2dd8c2ed9b3968916281eb330a7876913f41ca131642cfe2e0e2ff5a07f5
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/gitlab-sidekiq@sha256:67fbb3c79b82a1239fa5f21c4de2832d809ea7acdbcc4523cc8b0e53a9cbb853
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/gitlab-sidekiq@sha256:d8eacc1e908b9594dbec124c982256dce8a7c09705940002af3e17d331682bea
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/gitlab-sidekiq@sha256:fa36b14bc23dfba219bf6b6c1af4ac229f69a68fd9f5489cdb91473f59ba2a72
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/gitlab-sidekiq@sha256:818dbefcfca99e7728a5e570dd6d92db40cf18a274dd8e8699fac7d754933d2e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/gitlab-sidekiq@sha256:a8261c32e265d78a964ec7c81a3d1e104a3798e9659405feb128f43693fbc4a6
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/gitlab-sidekiq@sha256:2bcda39d703d10e1bced08610c8e2f196d3c528ad65b696a8c1395709cb6047f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/gitlab-sidekiq@sha256:75c080eb13d3739fb13e2099c09056abf394effb5f48fe5e40ab344c7713c29f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/gitlab-sidekiq@sha256:53316eae61abd94c537a2157d71ac07a0075f88a0a1f395c8a4f6078f018220d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/gitlab-sidekiq@sha256:66cad4cfdf6b7c0d17042864e8a46bb564d2be11b16e1908727875295032fab8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/gitlab-sidekiq@sha256:d11847eb60b08392a1e52885792451e4ac54a39ae617cb57d2fccc17b876f764
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/gitlab-sidekiq@sha256:a4b41fd943082424f7811e1b27d1adcd59a97f8c3448d0fa9e02c177d0319c0b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/gitlab-sidekiq@sha256:d7c54ed9827d0a60be70340d54e2efbf2ca4d75fc021ce2784f1059c396bd411
SPDX SBOMhttps://spdx.dev/Documentdhi.io/gitlab-sidekiq@sha256:8aedb3e024299b597812f1af216503dfca6e17b26df79c47b74ae0ca750d72be