Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev

Index digest:

sha256:4955506730da641e18408a48b08ea197e92580755543d0eeac045adc1513996e

Manifest digest:

sha256:282b3e1ddc3c3b1f683b68859cd80260b326b4f90d72898967cd4010ab6f6f54

Size

49.84 MB

Last pushed

2 hours ago

Vulnerabilities

0
1
2
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:5b4b130736ddce7f3303d50a559718ff68bd17e827d3d104e3100a6e0607e0e8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:14fb04839ee01deb14ae37a1aec91195c314d7c248a4779a00f50d9bb1cd3ecf
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:b94b7a2ac1105e42501608261938cf89020024e73f175f1ef12707a8ea60f1fa
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:843bfa854a6f2a539d5055f5b8b501070ba1531943e42845bee88f9cf29469c1
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:ce58a13b3811d85557b0940bf218cb035d1d06343c73ef2b7480801fa39cd83b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:ffd7938690ba66f3d16a9841e97a243f62f9402707aab5824b3078eb1fb1b57a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:b36ec4f119c6d88c9b41b3b525c9beea34135797caae6074865fb4c1fd804939
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:0c4d8e1fae51986e3aab48d0b8f3f175e33c31dbb2ac8f7d75c9f79658bc955e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:969e690638dc25f6455ea451414cb8be9f8b28582dc3c9ed213e6bb1178613ce
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:d5e48d81d08095bcf297d430a143043cde3e5398f255324163a5fd1d5a7b586f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:7a9b67d64bef3b8f08a781f8b405aae6b568b350eb2ec73a87d97b454dfa332e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:69f13c7650956fd8082376d59719df763c09d7f15a1252490e50814f665ca69c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:22d395546926dac941b76adc479c59bc7f95d7a86c37b406a05dab25489a0df0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:f24f4c4c39eed8d2a71bd83036ba694e769848f9107ac921a085b024ee7f4455
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:086ec15a5c51de0daa088f18e134dc67593c1ada6891cfb2f8d631fb9569be66
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:d7c056ff85a199e379b8d8a1097e81e830d0b9659651fc0d936294d1c113081d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:3cf5d93dc821599e06a45eb4d132a1b1f71a17815f5a25480b6ad5d228820ca2