Sign inSign up
GitLab Sidekiq

dhi.io/gitlab-sidekiq

GitLab Sidekiq 18.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

18-debian-fips, 18-debian13-fips, 18-fips, 18.11-debian-fips, 18.11-debian13-fips, 18.11-fips, 18.11.12-debian-fips, 18.11.12-debian13-fips, 18.11.12-fips

Index digest:

sha256:eb4d48b91b718ba6b0fde2a130f4f1c4b81dc1e46c16b426294c3128a343deda

Manifest digest:

sha256:0e0a790d4e041e3d6798c3a918c09ff2c4a5e00bb031ed08364237bcdfc6e61d

Size

554.63 MB

Last pushed

11 hours ago

Vulnerabilities

0
3
12
25
3

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/gitlab-sidekiq:18-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/gitlab-sidekiq:18-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/gitlab-sidekiq@sha256:787cfa7068ff45e6b6c47a780517c6096bd07e7649b5008bd56e47b2593b825d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/gitlab-sidekiq@sha256:92917e07adc719bb911c6c7196c4f23b83efe6c076c6f1ad01bd117d831bec63
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/gitlab-sidekiq@sha256:46fc88193379801776e1b7e2440dd23d18ffed0f5eb90ce5c084f101cdcf66e9
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/gitlab-sidekiq@sha256:e4f845915428da1c02be80ab801e0717d015ce1bfa4d0ddbcde41a7b52e60b93
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/gitlab-sidekiq@sha256:5cd2e7cd48ea333b1e2809d72a56e02dcac97efdf23e2845e1929b8a239f5ccf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/gitlab-sidekiq@sha256:beada3f89328f8760f1064e9e2aec9584a02589add35e810b8678d00c360bba0
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/gitlab-sidekiq@sha256:88efac233f0aa5488b82e9d90ff64abd60ce8706166cc7856809aaa4800062c0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/gitlab-sidekiq@sha256:a855b381484ad69dc808bab19bdb4a6c63be1327e5dc56800b6406bba34fbf8d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/gitlab-sidekiq@sha256:e0b0b7f1f420d307b2b7988efb13667bca620c6b5b6f3d2b1e2f650002c3bdbb
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/gitlab-sidekiq@sha256:9f0ca7d6befbbe90dc1a0aab8f09af514853bded709c5613873552ac0148a7f8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/gitlab-sidekiq@sha256:6a9422ec4fdfbc59fddff6c4cd42741b42ec60ad7e1d03f550c74cffa4ea4873
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/gitlab-sidekiq@sha256:7210c9d5e9dfad0630b950800a60e25c909827d77e138a0be6e65bfbda1e939e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/gitlab-sidekiq@sha256:9cdee28cd1c79edff82bc8bc95ddb8c4f54019382a7a2a48d1abd6a95706df03
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/gitlab-sidekiq@sha256:fcaa0f9375fb14b52931fd2260edd25ee4a1a887415a81cc76fa54ebd1fd94f1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/gitlab-sidekiq@sha256:9b041d13262f49adacb1e4c95933c4cb72cc5d023634beea02f8750b0ada92df
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/gitlab-sidekiq@sha256:c6a6ace1b36f24df2dcdcf36dc714350276bdac252ce4135a172b645278884fa
SPDX SBOMhttps://spdx.dev/Documentdhi.io/gitlab-sidekiq@sha256:b1220689d796e717dc3bc2bb12f1438fa6e11375f5324cc2e9ea94d74400d123