Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev

Index digest:

sha256:4b7b096aebe03e8cb45946eb283397de3be363499964ac6c774d657e1eea7807

Manifest digest:

sha256:e2e9c8a9e2f7baaf9c983653a690be9b53ce6f07023d055cb3e53d8b426db599

Size

48.98 MB

Last pushed

15 hours ago

Vulnerabilities

0
1
2
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.7-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:f1490c16746b716d6d674505f3ece24647198a72c37116626e13c5fd5e73d323
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:a6d28f507c9ecc6b49935652ea0c93ac9d1b261fee588aaed1d9576287db4e7b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:637ef1b73ab9d18656bfca4b2739683e7f63aab536cdbe05111c19826df53248
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:20e0f104ac5a5d4a2a35cbb4153315f2bd73adb9088862673ab4d461baabb873
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:63f5a6fb6496f3d9b12d51ba8a521b355352509c8ef9a305fa54bd1baf7092f2
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:a1f08ee83a1b2750f5df2f533dba5fa29b1ac3f8ec47b15db54478f0dd921df6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:2975fee7580621015954f20ac327fbfdc13333723895d94e4b9401d28f5ca170
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:d39f2708a5be69a8138a9521e515a961d49dfecd0c849a52352e761dbdf8fb27
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:efb8c736f1e86527c054da6d4edf527049259b07f6eb8c560287cc5e5dba9634
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:6027af8fb7be5ad2602fa3a3a434b5228edb8c51884cee0d29ee9ebb25dae839
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:0ce3c438452e86df581fe620b622ab84557013b2b40c3773c801db99775d519e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:a0fceb27a07180545986feca24d77023001c2b673b435aa35dbe3822f3e1028d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:247d5cf49db7f72424947a5eeb4f9c029c947cf48e154bf9f36652d8bbd9ad43
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:c1b19eb1b9423e452f7b36f5377e8e5296c7fbadbb09978b6a296be248732ae2
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:a14855cb7063416d5d62d39dc33728c286b6b9d6110628b55cc1c9b06a94d98f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:224fb6a5bba4a0ac1a340fb9029a9e7f268eb1f1aa2995cb9fced495a1eb11b1
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:8b715ccc81df02bd524b8b84bcac54fa39a1b84e232a953bc8005b77822cc3a3