Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:7a5bf36278965b9f957b72c147863b0b391022b40221462f8c127a7b222ff7c5

Manifest digest:

sha256:a345edd80a41f071e536c07f7f44582bbc285dbbf775ff5c9a79a25f1c323551

Size

3.59 GB

Last pushed

18 hours ago

Vulnerabilities

2
8
7
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:a62f9d6e60ecc373e97cc502d1ecedf1f533d67741c5379f75e2c4aeaf637783
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:244c5ebdc7912d1f53d16ad33997a2f4a99270e3123086cbd8d627bd7aa05b9b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:474f66406a60019cbbd6ae9394270c9eb7847431035dac79af82fe4d167dde1e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:a2087d92a1f03ef859ceaf35f088005a769860fbc1b4a8b21f307c22064862d1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:0f79c7081724af3b128c2973ff33f3929aeff99135290ba683bd96ba858f54c7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:777ba337b2f7ec172834e3d65ec165a9060de9180638c33089b4b4874bb61a60
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:7f716f96efdee0e7d90d43cb31c3b7dbc7fe21f008c48d58f47198c739c06da0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:4ab9bdb3c5668ebe3e099e4d0bd57484f4f1a047e5415dd9f039e608c5e0b7ac
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:fd0a1602f083913d47e5478db098cddad97d0c35bc93c01f1288d2851f1de0b0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:f3cd0d16a8169e5ae3ddb6df4f5dc51652524d74300051d0680e65a2aa3e95c9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:4ac8f8ccb686e49b2c1caf3250dbf8489672a90e38eddcfd9d967fb4d5b0a33e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:6f9c90e3a266a2fe8eb01c6f28108c218885a0725b56947e7c85fea37f4ec781
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:ebc464f838d2f51fc558d0e42549e464d8c166b2db0dd6858f77f74b8a049c5e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:4cc7264d5c677e1d08cd47aa2ffe6fd6c8df8fe03193c6d8ee368de6bf949d75
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:7a911d519a4602a6a6066e64478f8ce6622a36a399b79d23c1bd1c4f3f6bf402