Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.13.x

CIS
linux/amd64
debian 13
Tags:

2.13-cuda12.6-cudnn9, 2.13-cuda12.6-cudnn9-debian, 2.13-cuda12.6-cudnn9-debian13, 2.13.0-cuda12.6-cudnn9, 2.13.0-cuda12.6-cudnn9-debian, 2.13.0-cuda12.6-cudnn9-debian13

Index digest:

sha256:8f53a79fbcaea25bd847ec3aa95cfd9b04d2f7d93f1edb24f501c591889126ad

Manifest digest:

sha256:3e17566c8a7eb331c4a6dc2e1f6274bd8456cf1fe8971d4d3be469d2186ae37b

Size

2.39 GB

Last pushed

15 hours ago

Vulnerabilities

0
2
5
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.13-cuda12.6-cudnn9

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.13-cuda12.6-cudnn9 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:7abf2a823b360eab242705f5eab0d14e803788af44134e49e0ba07bcce6eeedc
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:8bdfdebc00f6d4e5f19bfb89c5a6e275d48b1a139129927f503b50637dd9a71c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:d0e70331a2d54ffc8af8fe46325b263f4b5f85cd0f7e8422814534f984f091d1
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:a89fb665031969d435630eab96a9291f6ca44835d97ef3771fff821f5f245623
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:d319a080f3e126caa1b2483b1b6f7922a20b2ce247020f8dd8d3eb6a68734f83
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:2b108c87db14e24d346c9dbc5d27debcef722ab1accdd91f94f2fd8f3d900eea
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:a7287a72e3cc7a20f90b808c99ffb6684ac621c2c3165a9671ca58258cbe5725
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:e70833e058316b7f2acca040d30a23edbf0c2416624e342f21ec97a45316e295
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:40ccf1765c4e17969008e272125d70f3edf5b5e0053e04ccbbc673d8f4f42f86
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:5b17ee03898f464e63406bd2ce25fdcf82806c888ba63bf743419ae657513957
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:25429b0289cefe0caa359a7d02936c1e6838759debe6dab8e33ed9c4183e6d30
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:24af1fc39878cf7b9ee31e48d8a18cb39b1b2e25904506f18b6fe476c7973a93
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:8456e6d9b9c917b632408fcba828d9e8cdd3f7c58c481ae36f2aa2bd4c68adf4
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:496ea29e586644453f64846c342cc5a7d1bc30d006113bd7d84ad0d108a46054
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:3e0fcb68cf144054193b1be25d0ddea9554e53ddbfcf9b93dfae5579f59801cf