dhi.io/virt-exportserver
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:5b97b3354b1f03b69f7f25a192b4876a85093f18edef0cd071a1a293dd89205f
Manifest digest:sha256:c841cd33b6d4e9b15a1ea70d1e60a1eec4a301477aa116367257623b73ff5bd4
Size
49.84 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:a2fafa8c6546b149707cb4c7c082543be55cd88afaa90c22125580b5537ff894 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:03d3d8002bbea3430d6c1e7204cea188a789f0dd3cd40a8314da7c42e0b5b0c8 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:d8306734b00e74e83a7e98c84529934e0bd94ccade5894a4aa0c304be365baa6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:28493ed7955a2f358948db7f04828869340baf9575e4de1a59563f31fcc6f8a6 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:44ba8fea40c3727dd982a95b1656367b94aee08dc89ac8123f3d129a0b6f9153 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:8a461f817691f05982b8f27c316408874ff8bb3382cd362f4cfad87b67acaba2 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:c047591981ac40da52cacd941b680a5b7ae0059f6e85e270405c01fdcd35837a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:0dd4b7f7f032e634a9dac0e0ac84eb9150f8fa939ec52083d928794792184ab2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:1e676095a70fda44ce2d2ff47abea71368fbbdeb1ab3584606e3f2540a1ac1a2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:8a6458b45476a11610abd173978e9bcba28641eba68a7250173c7ad08f091bba |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:d7085dd96d46ebfcc5ee85f54e2bcb3acb52fe3a229cefc4032cdb0e612ffce7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:ec91a9519391f0030bdc4dc8671c0844c1ccf647d49d858812fbba1d94d2c6a5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:2378005ef87938aaa86f1531fe0bea0d6f29309b8c3f9e3b0e6fd6cc4a3efe7b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:dbf27a50ed5b52d4747859bf66bae6955e08d3a7c19d3fdf5e1a971eba454f8b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:3c566800332cd523509170aba845378e2ef76da5bd2bc44414bac33287eade18 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:0158d49a89a299f1d1bc896811e6ffa68fb5e64b60c31293df3118a6116adae5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:3b52968b9224248ad687f5595d9bba3ee56f5a611b5f05ba8d9b0f61eff3ca44 |