dhi.io/virt-exportserver
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:c1f4a2f82422b17583d513f07bade4cc6d8029407954a88603cc033438438a66
Manifest digest:sha256:e1d3b0c1a5c84a614e56e92463ed4fd277e7ffde479d04898e0f06b32d7f48c5
Size
49.85 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:84b08e1f5efe9670461ff076b92ebd1f7f45ad3b455cf2bfed58f211467580e5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:1371f2ba7966497ce6c9f74726a2660a1d93412e16822caba5ba5313cbe1496a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:bc8e3f85edb5d2d3f22ab7c91988232f1774375e43ceb4d82ffded1f2a9e89ed |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:93ed655f58345a7cf70b572a790c61d1b753e70408096208046db5a3b710b88f |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:673bb4d597c0e2376969ea2ef290f0223a235decea29bc2b482d51c5072a642e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:0248c0b3406c1a47ccc6fb8d5ee6ba2d6f28da566d9511b604fe7c6bb7887b1a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:15171cecac7df7ff80f14dd353916a89eb1f35f384284825a8557fa1a273ee3e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:5df62222ed0d7f176e71320769405af1cc6de7313c3afadda8f930e48d8ab5f8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:093cae0a8bcad06287c2765cfe1935b057b721aa0b51ab8913d6d3c3304bea57 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:02535891de1497e25a6ca95c98c8aa012c6a978766bd9958780ddc9a6e791dcc |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:669e5f79e2e0783cb8fbc9462442a5046c7287622bae771694233561ac5e4d81 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:b5e057595b8d4ea04d61ceefceae614e1f0d1092cc3dc688719c15f882269a2f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:ca5e53cba67ad4bbc905f7f16e8c8578d9d01630e81b15f1d9f341dd6354309c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:4a4d8a6ea7c443b619fe124ca46a882392dd5acd706537c5906e170a4a385028 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:0ac691f49e2600255e48bb541c7ea038b753f8ea2edcb221f3f06444d64dd8d0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:b5516b37f2bc3a4ca026f43f6d43bc19f817a7050d0bfc173e1aa3c011b41cf1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:fdb9eb43c701d0686a0af2ab7c09f1eb9b4de37626c56fc70faf673772d0835d |