Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev

Index digest:

sha256:8f2af7d6fbcc87db7fe792f6719d97cf1760b1135660a1b7d3e5cab53075d8dc

Manifest digest:

sha256:1cfb8339a3c9040a756b1c5d63b04ceed2153f2914adac6ac9591ced0f92c0f7

Size

49.85 MB

Last pushed

2 hours ago

Vulnerabilities

0
1
2
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:8a5a8a1625a566cfac56401d70b0e5d64db93d8f807d0ada60387d4d82efd2bd
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:e1f4ce643fbf75874c70fe5e31c33011162f4d57527cc4694f7f1b420e942668
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:16b013ee107dde41bce1ac81e5580cab1fe261e6e883f2720df8a095488c2051
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:66e4281765b9308a1f7ac0216ea63221e5a4a7f4170a4a92c35bb12aeffc5d18
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:1c411498c6cc074a6077c024480186fe9847d2f55c147124c79291839c8664c3
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:a0ae5e8ed21990a8870c5ab0a155e96391c493fef0d46d3f8c8b8740921a958b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:da6059338e58404668158460f15cbd78300f2d17a549d74cbaef3deb2300b3e1
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:c4c96c40bb27b37fb5447cb9bcc8ae2004c8a9851bcfaa91fdf3f78ea149548a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:19d5a72f81dd587bc0eccbf530ad257facd132f3511ed5dd909b9ad96f883e38
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:a8528fcb78f61c7b0ae15942ae27fc8b754d50eca8ea97b183ddadd67b9cf460
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:3a7ed7a19a72577a6cb37e4c4df7a4fcb15e78a0ae9fffde7d37ca2da0e30e2a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:26b039aff8fc8a8fb68bad494d22dd56eb5d2097c0e1da3947869c0f00fe9550
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:d555442118fe435bd2aafeb0201fafa1addaa27827ab075a7d709f58358be9c1
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:72f8a815451a7bf32710344cd2d7f54d271452f3eb4b50d023f7f2d9bf9d59cd
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:7b23e7c1ce482a022ea58124d82b1b8815b7ec622525259929279b43d165edbd
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:03e4f57a0295a1c6e2d4b5c5d0c31b8d3f798c0683d0436b76ce421cc1d4fcdc
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:ea9ab9d9a064ca71ab829e59424272ba72fefae482927f693cec58eeafb62cab