Sign inSign up
MediaWiki

dhi.io/mediawiki

MediaWiki 1.46 (php-fpm, fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-php-fpm-fips-dev, 1-debian13-php-fpm-fips-dev, 1-php-fpm-fips-dev, 1.46-debian-php-fpm-fips-dev, 1.46-debian13-php-fpm-fips-dev, 1.46-php-fpm-fips-dev, 1.46.2-debian-php-fpm-fips-dev, 1.46.2-debian13-php-fpm-fips-dev, 1.46.2-php-fpm-fips-dev

Index digest:

sha256:d4fe0ad626ebd31550771bbf1b4a82fdcce7381298f05d7d4964746b02b33159

Manifest digest:

sha256:aebdf823a71df2b45c04ca5bd952d9be3e300d18a78efd3ceec09910b4afd066

Size

158.84 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
1
7
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mediawiki:1-debian-php-fpm-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mediawiki:1-debian-php-fpm-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mediawiki@sha256:22623770df7f6da0f139323642e8e136268810ddb1be4419a635e5f3ffe90828
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mediawiki@sha256:7457011a3b5546ada1dddf0a86452e042200c0b3fe4ad90122e9e374fa355947
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mediawiki@sha256:01a9a600dc12e8218a5f05488b47d4c202417cc57706b0ea774c14e90cd32362
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mediawiki@sha256:f80abdebbe9a2ca568c10dced8bdc38523b2f841174048c2b8d357fbacda7f21
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mediawiki@sha256:f35a65d2b46ec3c40da3a2f3c36d4bd6119b3d30ff7c80bd45ec67c4db3661e7
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mediawiki@sha256:0bd965a0d810045c252ff83f2633f2f518d3e0262ce77d40bab74e576afed150
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mediawiki@sha256:958d33a6e9275b76cbb4a78e73d231ddb5cde17875fac3e61fcfe4ed9e24d200
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mediawiki@sha256:b1ea4cc4669cbfc977d565660912cfc75046a428d190e4d6b4d2faa4e441276b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mediawiki@sha256:384526c257aa73493966d2920b64016fbd2e99673a0490851a53bac34f2cb706
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mediawiki@sha256:9de304793a44e7f187fd81d7fe33681bd0d593ef9e123a239481a9ceebb59b75
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mediawiki@sha256:027777bced0e87d03dfdb953237bf24d1fdc596f49bef969d86e503721c6dbd7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mediawiki@sha256:b296592a609b4747f4268bccc3246b451221f9da0254a92790a8e6455e565e53
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mediawiki@sha256:ffdd199f19040da909fa9d033ee7c16dc2601c27d4952dbb09fc133431af81f4
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mediawiki@sha256:6cf6105e51435cfc0dba0e1a09ed99e9656f75fb3ea96a0ba3e2161987305c9e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mediawiki@sha256:f5da6e71b52558ad48aeef57c4425de33c859c5f654ce89678766703a3a8222a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mediawiki@sha256:51c300b22f2e205fac5f2312c456e3d3198fb36ffa6d3ac04deb247a09711f18
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mediawiki@sha256:8f30dcd030b1803d894f8083545f861a7c0fcaf60e7908b5980bf59436f101c8