dhi.io/virt-controller
1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev
sha256:57356a7d00134452b44b238d501e78244e973402f77751efdb9fd501bfe7f6d7
Manifest digest:sha256:640baa3c34c8cb81b1c919ad71aeb9cc69b1d25f1f4e79af11a911a4e4823f4e
Size
55.66 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.6-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:8658359a15f5abad87b5b7dcd3b9a819eed1aa0e6e6f51a9f5d63a3638943bb0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:73e1eb00e2dc8197dafaec9b78b2a707c617e9f5400e2d1ca77a04b4dab74e4c |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:adb66ed91b302bcc5dc61df2a6d55bc4a67a3a2a587b5ecaf8052955e7a0e5d5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:01f438b4eea579e4aa1b18e22b45ada63ec166dc486245c6f5a5cddff4ccf56c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:0716ae30785ea34287ffa7ec296f17fad923d69df02d5d6512c165aef3a4b48e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:2ab3962bf58b3df9d6739331cc55dab4b944dacbde211fcc10d8d73a4eb9f540 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:a264034298466c965c3c71b719cac992376ac0e5cf375cf0661576c40b40fce7 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:30fbd46310540c32eee6b6fe7dc82bf0a159b0d215cf31e7c9207ead3260413c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:1736138dfcff42b8a040398e881ae6b815402fa4e52f5b61e9187aa6c6e7536b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:fbe296e528d7ab6441b38b44444363582fe82fb0871da9b0e7ff713e73838f37 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:7f77128ad31783e9ceea34d5567ee779de2474d4c32cc874b79cd8718bd5f189 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:3a902f5bcc16287a09cd56afbfdd6c5cb33add628254e39953ae03ebef2c5398 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:594fd8cfc9852d5a67680569278434a040b274e911cc8771c695f90401faa0b4 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:4db02d105d843564594f22b501d3a3e4b8ced0dffdda514898dcaa44decb6a75 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:3905dd735cb9745f88586e9256b9ff9f91a7a7fa55c35e5534da4a785a80fbbc |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:55dbf1ebe0a9909664d4a4c4b9092d157d06075b86d9ea09fe971fe028e41759 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:b6caf32455120fbe9338cdd41c0992d3789a7d22db2917bca2cb05918dd28465 |