Sign inSign up
Virt Controller

dhi.io/virt-controller

Virt Controller 1.6.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev

Index digest:

sha256:4af15398e82afe52ff94785be850658ac3fbdb76e8d6bce30efbd605e64a31cd

Manifest digest:

sha256:3a9f07e0ee958d50df2b2407fc2d0d11d7a09e0e1d8c865e3ba70a1653928b38

Size

55.66 MB

Last pushed

8 hours ago

Vulnerabilities

0
0
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-controller:1.6-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-controller:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-controller@sha256:57f01c8453318f5594d7a317f9aaf3ab88a378b2467ea579983694a875646d22
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-controller@sha256:b8af0eb123a6cdb46ea7efeda7e8130e92253448b48a6ca7fb7c32136f7a0f57
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-controller@sha256:76a73b358b9ea21e3038bcd6a5fe484bc9d129a949156eb4d3f575fc5d47328b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-controller@sha256:a13303357a2c8812da26b4aa8b327416337505ce54a99c99c81efa8c120bbba7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-controller@sha256:ed9953f3cd5228954185ce93fdae642da5935870b28c7b4238a428c102a21d92
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-controller@sha256:54cb993af61581fbfe6e9089f16364733816743fdd71912385fb9fdfbd950828
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-controller@sha256:fe1ff8858b1292df42c2a640ddf3df59a0e5b3066c8618086ddffe5ed78a104f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-controller@sha256:2e0f8d96e02a6e8537843029ecb538df55940b396072b18cc554d288d910132c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-controller@sha256:6ac1a215c9ad4f184e492023daf72900b857e633fed5e7d6631632a1127a4157
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-controller@sha256:959027241ce8aa8115829c0c28421e18221691657b686dd50176420db6c3d169
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-controller@sha256:af38bddb01936bb2ba59fb1a82a3117c2474e0b0970a1dcf69343780c8f4b18d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-controller@sha256:5a9856d00e5c44e3506427c5ca606b43fd9bd4dc179b8b41b64b36adb037d5b4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-controller@sha256:9bac7b7dba6af68a1892d492e06f45c05320c3df7fcb4b50affce4e5f0e629a3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-controller@sha256:5490f7acc6739ef2b01e6fc4eb03ac32652ed8900d833726da813f890f7b7dda
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-controller@sha256:bdc1d4ad47104dffb1ec4ce13c26ff53205075db7545243c0c9df7440d98cfc8
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-controller@sha256:542d55e63f6bb34f5576dbc56bcb65716dc2d1af40bc0956f105927bf079bdf8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-controller@sha256:9bc600dc444009be973763abacae2f9cccda40ec785589b580cfce9549e0a065