Sign inSign up
Virt Controller

dhi.io/virt-controller

Virt Controller 1.8.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev

Index digest:

sha256:4887e1a8100091e9b71cc7a2a0e10878f42e47189b6c9b01482eafa12af2d402

Manifest digest:

sha256:3399c6c15bd7ef4499fdc73f33b53dc98370308d9fef8b6a95ccdeef3d00c571

Size

57.43 MB

Last pushed

12 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-controller:1.8-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-controller:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-controller@sha256:e1d3c3be63f0e6cda7be70ccbb9b686bd6e0bda78041c8ad23e6df2c6eac66ff
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-controller@sha256:637f57cc6e2b01f5c3be31819cbd0754947e1be6f702318e965e538011c11c60
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-controller@sha256:39aa3d1a97831932f0e41d578a5d4a3d596b1a3e123f0a8358a05a35191ac537
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-controller@sha256:d1e35b59aacd284e75f932bb03e0bb33949cf64c43b675c641154f7cd810d694
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-controller@sha256:6ca085d0cabe528dba1ff071ec6fed37d85c68308b7d4bbb8a73996cbddd8a2c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-controller@sha256:48e93073d95e16e6f6716b9a93a8bfda32f1daacd52960cd16c6839491d142be
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-controller@sha256:04dcd4231364852a3adc0854c516d0b8a4b8b99d33e5ea01e9d3b6c704be9670
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-controller@sha256:9883d23b054f84b7dd7aec45d18f15180fb974d160de443e378c036140da1754
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-controller@sha256:2eac066140b93b7bf42c5bbd9a9ed6bf23f6832a9e86625cb9c0cf4377da39eb
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-controller@sha256:bace09f22f0ef2c90ae7bb9160ff6d51612b6d77254c03c5b8b8bea708599db7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-controller@sha256:73ca54c0f75c4a8767a58feaf54a0ab031915be6abce0d88d5ce9a5b0f0d999d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-controller@sha256:1a70008a19bd9724602264b4178219c26bea7ad95eb5aba942099d8a2ff9fff8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-controller@sha256:1c8a3f8d55448fb5f5ddccf5187588e15055c2999adc1f6c5ad5740758ac876b
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-controller@sha256:dac9262a664bae8606c406f31dd1cf8e9ab2efabb097da5101798c3068e1fdfa
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-controller@sha256:f5b59f30fa98a5578dc4d82f68c47856b9446006a4ac20fb8e01435f34513829
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-controller@sha256:ddd8f1ea8054c8d406a18110b207f553208457d85c7f89b139d8d607a8f4cd67
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-controller@sha256:1215a0a24fe75b46a61d3302a59841a2843d5302b3cb05a10535ac5a137d6058