dhi.io/gitlab-sidekiq
19-debian-fips-dev, 19-debian13-fips-dev, 19-fips-dev, 19.4-debian-fips-dev, 19.4-debian13-fips-dev, 19.4-fips-dev, 19.4.2-debian-fips-dev, 19.4.2-debian13-fips-dev, 19.4.2-fips-dev
sha256:ad8a8ceefbabbeef217cce47dce5dfcf38b89da3c53abb2205147d949f016416
Manifest digest:sha256:a2842dd4e17d91fced2bd5c729e2ba3f0fe929443e3edeecf55526c358302b73
Size
749.55 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/gitlab-sidekiq:19-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/gitlab-sidekiq:19-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/gitlab-sidekiq@sha256:09c041349591aebb60b35d61238ecfe7fd2365a24b0bb89c998b631c2a274b1c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/gitlab-sidekiq@sha256:5a8fdf692a9d1036278ae3204dea63a60cabf0777236ed99ef4cc2b1e3c054a7 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/gitlab-sidekiq@sha256:7aee8a39dfa8a0a2d77917766eed123f4737e19bf4f5ce28337b7ad50b0e544b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/gitlab-sidekiq@sha256:b2887e92a7681fba6ab769056c44ba01723beef338d6b90b723af42e253bce91 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/gitlab-sidekiq@sha256:337cc2e7ff8dedb893da8079775d0c5c92e86cd114438c9a5afad8704980dbb2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/gitlab-sidekiq@sha256:ba265dd0797aa0ddcefb6e674b40aed73168d2758aec2522ae643f6383ce85b0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/gitlab-sidekiq@sha256:5cfb423bc493e64bc86f3b5d008a5b07471d9ad7aa29f3af69b5bc354d594b28 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/gitlab-sidekiq@sha256:08a106c4c60de6538bc9c7e4b9822ed169c83083379400eebb71f4f085a5696f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/gitlab-sidekiq@sha256:52065a235a4836e3c4b04595b88d3c42d8d64e879cbb5bc0d712b3c4bcc15d54 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/gitlab-sidekiq@sha256:090e06f3d8949201bf78b0963b065f23c241ed5ce233fd91e7e8b4c16d837d93 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/gitlab-sidekiq@sha256:6af21db0eab8ea6c08d7ee403e09dc95cdb998de989d6880a194e8b9d889f957 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/gitlab-sidekiq@sha256:c1c1db4735c099decac95d24182a6cda1946330e5ab8297238dd85a6f0835a34 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/gitlab-sidekiq@sha256:ec0c6bee21fe7bb11c53a7be8ea6674f868f5a69fab179b15f434c8c6d339d36 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/gitlab-sidekiq@sha256:5393832ca05302b1ff3925e0ebc12e41106300d38bd35d34997011bee89a4969 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/gitlab-sidekiq@sha256:297f1acaf9e12c6c71ee18b59b62555438fd65417c16e6878d2dd10f846b590a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/gitlab-sidekiq@sha256:c2378020ce134decdabbe9368f68c5663cbde9e3deb457d2ebc955ad958ba134 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/gitlab-sidekiq@sha256:288eda34c0bf2406973e96e54954c75fdcc6860623251a1482ec6bd9875a70a1 |