Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:89519c3f5ac1a059a00f1d770fd7f6aa8df94156ec6d589e1e7ae3f1c18611f5

Manifest digest:

sha256:7e23608a17689a6404a8ddde3fe71cb04378c79bc2812121716e96fc6daf15f0

Size

3.59 GB

Last pushed

10 hours ago

Vulnerabilities

0
2
5
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:00451996057feacbe99ee037a27dea7ada341e8c76a39938e963034fe718edea
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:836fd347ff2eed99636a507ab993dced0f1d6f59c9e291a5d1017ee679af688e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:2c35d3e21218fdca6c544998682d7a8a8ad620d2ac877f0e10a75539f47a73b5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:be269971f7cd8e91fcabe27a49f797d9b6acac5383620895ef7bd47f3a5d26f9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:3fe2caa35aa1c7c05ca12102038a4cd0bd6e373bdee1994464545ff461949893
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:6a005ab3d1ef0050707b09d4b43e11e38a4f72c9d219bae2f36869b4151cc0c2
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:d1548f74b3c586954edff0e5edce56d9185c3cea7ab7225c0657e3a8bde465a4
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:9d49c66a71a588eeef39b43c407f551314cb73cedcad84fa501d41c43790090c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:12a9e6ac26db946d7aacde44656bafef45b0e3ce5528f4ed6552770027674a4f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:f8a83f573a81ddb0212ceb39f9760fbeb4e71275f27cb879e2b65a9c2eceef0e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:f42b00895d11fbf299b87f45fee11a0f6594228974bd3f765430fd035f159f0a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:a0ff62edad2dfd3d3660d87670f8e35d7fb61907eff4975fcfdfb153253815f8
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:7e47c49f01b7001cf1de84a85271c7b50027d0bc0adeb9017520d3a7c0f5d538
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:1545369c9e9e71fb8796bfff79e0daa603e55858aacd6542be0ff60e8f98fe84
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:c3270837aadaad37a0998a8a8a1a52673e4b1e5fab5a4d26e48034a9f50d065f