dhi.io/virt-controller
1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev
sha256:89bbbd9924e6a8c520a250dfcde7176002878e39c3c8efe049e0cd85939f04c8
Manifest digest:sha256:c6870a0cbfe73f15db3cbbd922feba01bec64c5b3873f5cdf9ed307b726356dd
Size
55.67 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.6-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:2284f21a9af09fcd55fada47a8a6438b85aeee819f87998c5d57297755c12e12 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:4c27f136c30a4f288ed5b6dbc4bc10e4627761920368df8f651bcc89c3fee76d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:ea455c3bf5cb590c19e524056834a4f37b3ddd1d622ed8565da90264a0ad83da |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:0f753b80f1c710369233b1a2f2d2da16e99d2745fd95b79fe4a2bc510ae83ef4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:de90d9a374f7c1d5698b2c191859e353b52fbf1f6458c86acc6dc5a0e7c3f448 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:38a688b35a4873af7451e7da0b5ea636715c7ad0333f234d301205cc42d0d4a4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:7e686b5124ba472ec9b2f4e5135a2551235a8796339eac27a308e573392d6dee |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:947e465bf7f007ea7a7a40232505f49db067472bb0535cdcce449c10bf5e31aa |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:12a1cfdf061244ca2f5f380c8d58e722ce80162b7eb190295771bd7d8c219903 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:ddd708150c787bb0c6a03c423db2d4fa6fe3611634c2f6ac8a4daa0bd7db2ebd |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:84724c6bab013016a93c74873544f541e47f8240837b6b6ff54811021560fd7d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:453f7adbe4dbf1df35965830cac42fd787479ddb494d815cd7295d97377d2f91 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:5aef6f1a2e5a3ca063a42cb4603b96ef3f1dd4b95ab679c35fe293e46810085e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:7d522e065eb8a077d0268202bdc172a55c8fa8aad0cd8d48018301cf4f4815fe |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:f229ae4323ba6bb4172c0bf16e666490cb02ebb9338d998f996eb94fbadc25e2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:016e8a205997c8e58ebfbb6e314d29a4d50002f7bc06f286c6259f823fc362b7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:e4b7676ce34ab2f9602a76fe848658d1ec8b8db460e25d6feb4ddf6765095acb |