Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.13.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.13-cuda12.6-cudnn9-debian-dev, 2.13-cuda12.6-cudnn9-debian13-dev, 2.13-cuda12.6-cudnn9-dev, 2.13.0-cuda12.6-cudnn9-debian-dev, 2.13.0-cuda12.6-cudnn9-debian13-dev, 2.13.0-cuda12.6-cudnn9-dev

Index digest:

sha256:df2a833b911c1ffdae13a26720ef9a27e4eabb8de2b982fada3faea79e3192df

Manifest digest:

sha256:6caa63dfefccf095ddfbf39d6eebaa45e828ddb96dfdeafc367a1d191f32d20e

Size

4.47 GB

Last pushed

4 hours ago

Vulnerabilities

0
3
7
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:ea91b9697ccdd03286c9c9219b7a0bb900711cb1365a39121d11322fdcb4f138
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:166c0a0df053ff030f435c14e06a8a43df2699634203dc9bcd1a48a31999b032
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:62863e3a4a9b6670f9dfb1d215e47d619f2365d694e01c0b4a40c014dd43ef90
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:c5cc7d8556dde1da4fa0a9c0fb3ba15e0888d3942decf04871e125f2254ccd61
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:e82956394f3f433a3c1f6172ea8b6ca1d85d526880163a2c9af7d7e49410f819
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:a451920e15e45799f4dee4f1529646029b83b318090a24d056c7849570129e0b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:40da44203abc9d28cb4e241393d72551c7967578cb5ef09977542833007e94cc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:8c5f4bb26fa437a6ff2c76c9842376ecf0ad2d6357739ce5fb2e7c89dd72c063
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:856a961ac5c4972a62d4345f255262d794b32aacec719e1a8d12d1fec4648005
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:27302ed578ffd5d9deaf0cbe3dfb8809b79933465111d6be714196c3cb82aefc
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:faf410034ffc64e7cf6c592f7fe14582fbab1f804c9aad2c7b4be16877d94b16
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:c5ab38377dd5915959334b6fea79e60a87064306112d6569ba7c9cca19dd4fbc
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:60e234a7c81a33ff108379cf8425885681a5504d448f275352474c348bf3ca2f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:1b53d0890aa7b4c1cc1ca8cd92f74429c0fc4d7434a7f912e935f84d635f3eec