Sign inSign up
Virt Controller

dhi.io/virt-controller

Virt Controller 1.8.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev

Index digest:

sha256:5b53ea3fd106a782b42f36d863a73faee6a5c3a06009c47c469261853dfca638

Manifest digest:

sha256:9d3cb6077617aa4c338b1ad95b111e9f9ef87f008ad314f552e634ab26a6edd0

Size

57.46 MB

Last pushed

19 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-controller:1.8-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-controller:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-controller@sha256:9c902db804556fd392434fb6645d0ade6a0dfab1da21a7ee58abf26fa5615061
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-controller@sha256:0a0bb32f3da50fc8796e11a0757e37bcb1db3e12354f5496ab8b9ab972a0883d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-controller@sha256:d6aa2e4728b0398c87a26639653616ac8a735e0f8804555716332418ea0eb0c4
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-controller@sha256:a9da7777efa070c475090af6de673bd55d8d2e6276d7612e31b886ffc3d95a76
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-controller@sha256:073fe8c879909b59a3496391daf06e3e4e6624a5d540d48722eb8af95b92a187
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-controller@sha256:b4ceb0830c339eb822a00739f87974a2cb227c95010b700d6cb2324a853a7b11
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-controller@sha256:dd43b66d6281721aabb68ea283383f40aa7780c143f450b6a287bf0eaedfa68c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-controller@sha256:c5de4fb553ba2b0969f04e0892189f58a4b897db72042b08ddf9ffb13693fe6e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-controller@sha256:c0aac75d3a5a58759e61689f66f29b6d774d0acd86bfe6699d55b3f211f1904d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-controller@sha256:9476c6a72cb24f7f3a88611def47ab7cf78d54d67f694a625a1e6d1f81cb5756
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-controller@sha256:3e3b12827bb622a9c3e6d273590fc6d0f30407edf8109836bee04f4bb6fff6d8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-controller@sha256:f514d014d435e73657f48ea1dc5c1343f21419231ad86fa2ea05bf3f29c98711
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-controller@sha256:1fb411e35f909ca5487f73e150742a96707d0c869982b2ae296e6acaa505a797
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-controller@sha256:8188c7d06ca25728e1dd71c8d6cfeb84ec0f5f92b006152e9829738803655562
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-controller@sha256:c42b4b01cf9cb128cf9bd4be87c8c1f2f06520b520bfd45205769af571343e17
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-controller@sha256:bf5a39f4ce767a491332a82a05ed010ef73448f54be8783d7c980b04531b9089
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-controller@sha256:11f7eebd85a6bc6af91c37d41501a9ce6b1c5d055a502e5321a499f06fe521e3