Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:d01d5051e4be6b47c64a05c2fdf0cbc2bd989b5eb76d30a244539eaf527870f0

Manifest digest:

sha256:8d53df0b524fabb7fbc003f0b4f1da1b0eb29cb049f90231c1e2925a38a0efb1

Size

3.59 GB

Last pushed

3 hours ago

Vulnerabilities

0
2
5
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:6a91d6f114612aa8a985d100af9b3cbd47e017c7e7aa77af325bfa8a07bd052d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:1d494d50747d8a7d01e98503079ae465a7f1775fed0581f7d128793a1d7cbb49
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:00c70988e88f7ddebd484bec8c37a7bce922ae83d2d24c0710dddc54231908e9
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:090722aed871796a1afdde9cdc7c990407b11cafa7afb32cdef4e80be5d55f66
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:5c2d223ece1807e03e194ecbf56046dadf4c5ce213952995a2650cf503a47522
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:b3ba8219a9f6d48d1367f4b8b4da0e5fefc5cb6e33ef45d9aef1de886dfefb22
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:cd12d25800ce819033750050e6559d8bc971f9cadf7a679983e9395720e94283
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:2ff1f1d0183dd99381594faba28847ba61df684a9302bf35abf8e19457096538
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:9df55b1eb9bb1dc57f591cf6d57b911f813570daf2cfaeca56e2bf5f19dceb3d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:5c4b24200e0b3310a29e1bf3a29d241c5dab3791ddaacfe26da38da8655a70ef
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:280fa657e26b53cb5782f123b5d1d01af077a401ec2fe55b94d567e33d3eb213
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:926e297605e8cd9424bcf84f8f4c3492e3cb7b555465873bd6a887bc30712643
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:59021e3096dd537cba72b9de27b81931f0b09bb17153b661e06ba30169da9027
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:69528454a17c3fb54d57705d8c4943060c784414c3745d1e88ef9c58a8a3fbfb
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:21bb86ce0b99b6e40866e2bdfc12e3b12b4fc34a76b7921f0f64624aaaf5d059