Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.13.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.13-cuda12.6-cudnn9-debian-dev, 2.13-cuda12.6-cudnn9-debian13-dev, 2.13-cuda12.6-cudnn9-dev, 2.13.0-cuda12.6-cudnn9-debian-dev, 2.13.0-cuda12.6-cudnn9-debian13-dev, 2.13.0-cuda12.6-cudnn9-dev

Index digest:

sha256:315cbab5179c2c2d52c0a2d9c8ba9b29e0841adae7af451924f98f07fdaedf00

Manifest digest:

sha256:66b88e71f70d8daa60fe04f8ff09ea071e7c752beac68817cb3a59e72247a5a5

Size

4.47 GB

Last pushed

13 hours ago

Vulnerabilities

0
0
5
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:914fe29fc44e760eabb67d7bddd51b59dfc3612a3e5c673fe45a2b68b23df0cd
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:cc0717a7513b7ca585550969892a9a91e4c9ad93d739b1c103269a2f66ed1de3
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:95fe93e10fc36f8edd16315fcc80ba57c110ee30157db6475c076436d2803cb0
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:74bb09099c874aa4499db3fab222b2d3323baca135dfd173b7f8788b324b19e5
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:5c7b7cc0b387ef40ecdcad68825c804b4dcdfd30c1e7ae00472f499019825d43
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:96836a80a3ac86af5b81beaaa87e493254be3ad74c12163bd51472aefeef1fd7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:43bff880f02b04d56494fe3f484c7f41b3c8f94278b526b924d1c8a4234dc88e
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:3609963123985a0b59abe681f02bab1a1e8fff3de3216c6530c93c33a9bd3fb4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:dde51bcdc73cad9f8a52c285f3a7eda2084187a275f10af76fd1eb766bee3d56
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:5ad3962c2706cfa83f63729a500d103b4655f6ef3bcb313eb64044400deb3d29
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:3f1ed64886376732d90d678489408e4655d2906ab4867403ff920de195655dd6
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:fd10db7c8c1e304fc32e39a8e1d91865cd2d71cd767d6b61d3ce5873fa4463cc
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:9ce11231d3884d9063e7281c432764ec9c33b47944c540cb95a20e2639e4aa9e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:4d726ac392357a2d2ecd9e0ab6628717e502bdfa8df893cc41db4a0879e8207f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:4aee943073c676997ecfb0d0ced146b47fbfdc99a5ce869d9096658811311fc1