dhi.io/virt-exportserver
1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev
sha256:f0e38a4da210a297032fc4269aaa38521aeb6e977e1e249be3952ddb79b84030
Manifest digest:sha256:faf18543dacc2e196403ff6771a3fc9883c6d9774c5df1e7a88cfae5bfbde573
Size
47.87 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.6-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:fcf6cbd3eabd652a45966071d1367fff0c1f66dc050d96e78e2323660a84d5f1 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:c0769836f870ce5f3040fa306075dc93daa899032bf149e295ff62742c57c7f5 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:bcddd5f1888ffbfac029cc88cb5b9be8c38a9a433c898f9299120a9d5eb63643 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:b5ee50fd7f50647ee6b73149ebb22c63e01e503659d13047935509521336cda4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:9ae9aa66e26392749922ada6545e62cc50ff450eb2cf184cb2d96483ec4c4434 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:7e5244296e8966ffa23a0360e4721998aad6ac13880ca94ee7690e7ba997fc47 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:a604ab8d4826fbfcd76d30941980e1f160aab22d26fadb6cabc4dd8df74ebefc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:8d354a2375a36425da22adab720726cfb196315e54f436b5f84730b32692b0cb |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:2b3aafe189d7fcf0881ae8cca50df44d339e0932ed841a7525522815d36fb40b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:4158b98242069eedbf5656bd3835a27d9f9c3ffc5ee27d9873f21933e7949a09 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:0817fdf29457275974a8bb6d76c1e874043f53f4c22b5bd25435827e1b2d13bc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:36c6091548b89ed8c713d63f33add796d219af560f95b4bb0e25d295eda82b8f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:6aaf77bba257af93e39dd762f68885cb53ebac21437104d60782d8205ca3d8c3 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:1b855f04c54833c85344c853e1602c4499e370eac78c581c1906e2e67d6b66db |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:bf0ffbe6d82cb5ad59a6482d14e4db54cd5af33fcb42eab0aa8cbfb92aee7103 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:dfb7d1b77234bab0e2b3c8e8aa535c9ad21e4530de61eee07f25d3bb710011cb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:04dfc35b448e68306f686f905bfc4e647b2922cc2de25051cd50795c354bff0a |