Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:9bfc1b38b06238fa26a97495a7a9a7eda3a0ecaf1eb0eaf3e15c53300f3639d6

Manifest digest:

sha256:e5e37738ae2ff94bbc82ccb11f9a9e8d6aca0ca682b56b3a1761b409ad7fc5f9

Size

3.59 GB

Last pushed

3 hours ago

Vulnerabilities

0
2
5
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:3158376485ba12154789a0c4bc142942fa76d7d841ca2f2e6cb31aa332550d89
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:f3815531f042fa5b645f637fdad8c5c4ed131dadf1ba3f54686a6d8976fbe172
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:3b71be33aad73b61f44a94378216c398ca350c4f21714c600b77c29b6b9227a2
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:54b95042a1bcd51441eb7ec561673b95c2cbbffbed436cf44816005201c93424
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:6900e47b10579218513c849c13f355ff56b32bcd1412b07dd45e946d186ba63f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:b30a0239b8717a06e852c65f5b059495919eed932e63d05f41fd7d871c0e365a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:c27bfa7ef2ffc969047a3a1ae8e9a3c3d131735852d8198bb0fb2a6297e10ee9
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:639859ea2323c75f725e07d7c0e6b7db7d622762ccee26595b4fa2a691469ae1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:ebee6c2a0438c595652d42928fb33f87c9f35b1bdb61e19a0d8cea7ec6fec82a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:0ff6e45f8dee4b289f63451bc024289764bddb50db5b7497999b25a7a49c82c4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:935fb1a5a5a89df4c0934c72efe53ad955fee6350cdb96170d5408c82fcd00fd
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:406a269513c59d5d925f97c34bac9f5621830cc0e3e534d20141d551df639ed5
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:6bcc7c46088e6986fb350d4b03c59ebff5e5c52ab331fbc5df8ca4cde7a39860
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:0d6b4c6df93d20d1abf8191ccaebb0a2e5c790fe5dd7e08143d6b3f0a5b59df6
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:f7be44600351fa03bd61daa83c09cd4cc6955413a8497029bcbe4c8ac5393bc9