Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.7-debian-fips, 1.7-debian13-fips, 1.7-fips, 1.7.4-debian-fips, 1.7.4-debian13-fips, 1.7.4-fips

Index digest:

sha256:fa4bd6a4f66f337c69d03627b1abe7c33a6c0abd6b38e361635789ab825de367

Manifest digest:

sha256:c82e69c299eaa0408be4c259e7af5e5de8e91d213a8607f918002fe48ed47f62

Size

22.20 MB

Last pushed

15 hours ago

Vulnerabilities

0
1
2
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.7-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.7-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:f388bde755e06bec8067ed66480d527cc75ce8e0b86d5638e56b691b9cb3b46f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:d7ecd0f8a2865f721fe89265af9b49c13777595ea0d0e4bf90e7bb24981602f1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:c57d061e78d0d52cadaaba3bff968fcb3cee981d23625ef4434527d999139adf
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:ce3763f91e5ad11b02bd49ec5436ebbc57d6b2291f8129a03a9dab81dee4832f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:96122db6b6a68a7f708f171050fa0f336131e83d21253e788645d2263cbd8686
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:413f8c3684cf59bb2ac76c010605ba7b61fde65b139293b832684be0707ff364
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:11f0f41e10d4a2f0631602f369b1b67fad0875370db7860071f61682f9d0a6fc
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:e5daf67e55eb98715d4d1928329ce2e33da0f7d3d6684e613a8bcfc744efa02f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:1148e5c9efe75128dbf5ac9effa02aa5ded34215033470b5fffe8d4fea9b1775
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:b20c7cc3cc48e93e32dee9c295282c0fa0e4e9f57db922d74fd99a62dba273f5
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:eae6a8f88437674c8e89581bafe2ff2fb1099142a681b8166ff8837ae7a85b6d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:ccd5caf18ca107f2b47b48edd52f7745f67b4fe8c992537285a1c86ad8b52ba0
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:584333ff9d25a616075fcc954c1dbe2d1514980d42a0b5e8f892d429f524104e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:53570fd11d1bd7bc78815b5c5ee1443a7d41c19e39b8bc5ba6c978ac7a6ef90a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:66d05636af5290aaf342914218e33d7c9d631c653609e877f1d6228ec95c1406
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:5400cf5d2a3af9f676357c58de5a9822c910ab7cee8d6a62aa71c323f063d96c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:94fd5697d38aa6151064674c37c91f301df7547196bd05088e6833125ef41586