Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:a47a7e0f58b488584665d00145fa4ef39e2ef81a4a1bcde942dc3b0a36e2af1c

Manifest digest:

sha256:384eb89fab29993c7156bb4e8cd5acf9781931240d01c9d7f974f1cd05744a98

Size

3.59 GB

Last pushed

1 hour ago

Vulnerabilities

0
0
6
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:f0c697ffa3eca1008c3a3a24297d5ad8bd5464a72588bd9fa7396f3f5f189493
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:0efe64e653ca628716b1450df92ad761714952fc375316d41f329ca6863cfcf2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:beb93b1519890bf1e97517e9d6e5dc7cd397af930207483f2d7ea308142d554a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:75c5648645711d6579ff4e41d1d9c7f19615dcaf6888c5e20546aa33b64dfd48
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:036ea961576e511b817526cd6b11a86a2fbd1951fe37ada31284caadc2c6f38b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:0eefc1e90022df2730003cf4f594659ec11e61f81719f688556bcd16e3277195
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:6d47163876d25242bac25771fb6519add749c2f7f692ab7289b3dac3bfccac7c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:ce5184a220226be6cb0c88448931eb4f46f04d46d562d859dd9a50268619bcab
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:a836e828619db7044dc35eeb472cd0b4758c93ad625c024a1c290d52e60eca44
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:4651137071efb42a2c20833704e9764eb5aef8ebd9cd4924be0a6a7c07ee4cdf
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:5f55e9b0e352f970b1e9bdd90f529d5d03f7831469bdd93635948e05fae18725
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:a40ccc3c466c61d4270dc0068ed1f19b3f42dff70db4187e00c4e57e2e252af2
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:ec6de7d984fcef63056083cfa889ef0c5cbca1aacf58363113cbe08380f0342c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:ffb33a9d02c612ae8bcfaca1d7dba78557b365aecf5636d668c4560f308c11bd
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:6513f9589e88076fe4afc00b55ea2d0672b5410d67b278f435810f3bc81988dd