dhi.io/virt-exportserver
1.8-debian-fips, 1.8-debian13-fips, 1.8-fips, 1.8.4-debian-fips, 1.8.4-debian13-fips, 1.8.4-fips
sha256:57116e10237faff7e8d13b4ea32fbcc9ab3b052606f5521d74c8081b20d6f679
Manifest digest:sha256:ceb4eaf9ab52cc7fc7d7d1737f350ab800a030734d9d3fe77bbacff0003ec026
Size
22.60 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:003108816d1de2ca865fec61032725fa3451023249ce6a1910b344e328b910cb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:37bc641fecad219336d9dd3cf723db6d20de785031cb8e08ba8b931aeef5482a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:cf5db068afd5d53616bd9cc77b01bedd252f392446a507f0f04d5f76e882347a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:e7a541131d8b9ad508e7b4262d0a83744b93eb1f65dc4f3ee1833ccefe9e5a85 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:cb72fa1960508fb4d446e0ee99f72e6a278df602d03608b556e3ca8c84cd3109 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:2dfa6e4294175d0c55e211fb56747cb1dd67b00f8e07aa24f54ef7ee6805a8c6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:7db3730ac8b2d29704b480019a79bb02019be092edb2ebb202493fa9bb63712c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:5be1a6a5f1865519ae89125e288c86b0981fca9889d4a7ffd8bfbc9fcb835ef2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:2262f93979a4fa34495947eb57ce2b7c8f1065fd1d08ba94406ad2b4e1c98ab9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:16874affe3ed5236ac4f6f87d32f3a7c4cc98c034f9c5592787bc5fdc6153f91 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:5350141a5b16739da88212f779924ade4128a064c13a204b5d67604f83102d3a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:73493ac67200acf707b2ba609315ba2319afe75b4e7e139b334e91335d056079 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:f0da3063a0876ddb4b032fc87a1f55c06b14a582ce9d4183e7c4ad7185b1e948 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:7a5eb84407ab16bc5582189a23b24360e0cbc1d498043c054e98145f1c492f2b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:ed207b4938e4fa85fef8f5fc24da24a7eebc1b6d6bfde17c0e7244cfaa472976 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:177a8fcded7cdc35ffef58fcc9afd74e8829e05b06e2bb48fbaa24fbace90c60 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:9428e1623532b0bd18c9a9e8b5551076e967f134ce2e4907fb89d3dd8300e5e8 |