dhi.io/virt-exportserver
1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev
sha256:7814e34e693ac1ab35f14d8ecb0e04af660137b181963c60112be833fd532478
Manifest digest:sha256:7614b5e92b83f92d2f1d022977d1c10d296f2b35cff0ba88b315b9cfe6ed9fdd
Size
47.87 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.6-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:86fe5f43af57bb8fe443a40038f07dccd53644891308662d0607e3c96949365f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:791225e2314635a39b95bb434bc1e36003c9ba58f9e47a7d836f5bf85f3ff5b3 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:e7f44aee65a028ba9a4a74c0db8140ae1ae4df715399c9ba8607e3847d39ca3d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:c906a81c5bd7dbd9824d2da2ecabdad532d55d2589624bb40c2a63b556aa4242 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:282c46906310f34ae91e9f75858f66ff16f63b61660b03fcd347ed2ee8f559a5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:6c5bca65eee118cf3b182f745613ee9aa1afb008acf10b773c5b1be2d8fc12db |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:3c8ee8ff25940fb1c060aa4f6d300e00490dedbeac4d475ff3fceb1748438407 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:26913f2ea812b3a37e4ef27f5030ee8904fe255f95c3b4ac9b05036482320bb2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:430fef2145d4dd43b80a1489a208d1947c35a290a8169a3cc0176cf1c14caff8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:9b3da9744b0f19cf9956123d576413b60df1ce4a6c0a0ffc7a3af634b5e98c17 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:45d1ef94d42a84f5ddac2db3434f266e20f9ea6f8c5acc248010404d7c2e4857 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:a30081187e242238590d5d0f9abb7e44faf6f2f4d156c4a00b9d72955bd11946 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:647d29b35a027952e969d9db64149b9b3255553723e7ac433503f1d3809fe0b0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:0b217ab441f72c5b97b4c3129da026f77bc7620d9a3721c479dd446acc16760f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:0edf585dc9b6dacc37e4f2e48a94443ffc92f768b7becd41784eacba33af495e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:393e7ad5eb2ac4fbece621be2b035540781ddf5978d120e2e272a034078ccc93 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:a39991e986e79500b9a60fd3446c475169e7f9cc7a69f480c0b326045372d0b6 |