Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:138f11c814a1fd506a21bfe15977b4b0c96a775824dcdcc412ecfef127c633e0

Manifest digest:

sha256:e4ddc5d362828865dd37dd794eab8877a4b96a300e086f899de7a38bb0524a2f

Size

3.59 GB

Last pushed

5 hours ago

Vulnerabilities

0
0
5
5
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:52afd142eac608e411bbd7ce45c97d1db35abfe65c462b87f4d7e33daca934a9
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:53a6bc28d806ebd01aaf4f75abb25dbbd9c69db394113d6335369cfa3fae604a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:0cabee9802d58fda25ff89aa969090c470f2cb8b2adb502d7d80eac8ffa0da7e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:401e43319f7ac85296cc366ccd11bc76932ccb91f3bee57309809ffbf05e9ca6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:64dd253c53ac74bab064ea896d9e8509799086dd4fd22c6dec4e8711ff2f0b30
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:9be7a34bef0c2dbd68e98667f82daf9de8ae4b5854e4ee881bf42ddb6822dc3f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:e98ac048dc5842cf15e448e3b09bb0ad12c46ff6e48bc93d2869ed7364209994
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:f13ff5a72ae3d566c5a4daf92cbb003ee9f881e0efeeccedfc3a042ea3968329
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:ef509eeda923ef778beacd2ebabd417e200327c703365f1a76af999f3bae7eac
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:25ad89e33b93eb06ee559c56cc46c22e0cb3102d35f42acb5c825759d60dc183
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:aba85cc900add898fadbb64514bb9e70dd19012323a3c192343c5e8bc009c8d0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:d3aa49fb1a44bca2e8a507e16ffe25f74ed405da1620d4c064aa2422b5aeff6d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:ecb27fb2559b68a8404cb990df12c87051cfeb04076dd7598ebd96de30b4f1fe
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:e7db1b727d6ee96b56621245b2bdf533234cc5eae49cb723fd0d6a65b0f96851
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:8149b70af2dcc9e468f0c2d78d04b174ee3150b206683459b1385d9b3b1cf209