Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:d827b0ebc1982e2e3aececa3cbe3353d21fbdcb62bdf1ec545172133eb1bea0a

Manifest digest:

sha256:edf6b5c0d1fceb7cf7f4a23251de7052c883b36a4de398df5a89a866281b4742

Size

3.59 GB

Last pushed

5 hours ago

Vulnerabilities

0
2
5
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:630f98c5fce88227859692a94d5aacc93a243f3f6b846e714ae4f6990f393ae2
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:7c4b17a603993c9e24c484304a76bbfde7e379201e2acdc012fd86685127c91a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:513a2a246d7646030b0eb7385c75b5af4a6fa5fb714d23c71bc604a4efa07e6e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:4920e134acae2fa4026710499b5c970a2e3c8db01985753ab5a3bffe3e97f1ce
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:f8322ca262bfb65975fd4ff8977d1e6194079a1d5286fd98717fb492eaafce23
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:0c1ccdb831c37d41a49699bdda632477fa30d0a2264e1ee3c76b82084a9e1295
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:f1e51eaecca7c9480a04e26635a5e869b9491557a3176fe177853841155056a5
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:1547c19f06b95dd5709567537c0dc789792b5d3207ebe86897d23265b27f432b
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:086e36b573f40108ddcff24db3dbe3de89031131b421e09bc724663cc1ff9b5e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:c6ad84f243bc91f12edd52a58adc4aea840e25f5d7bb099e831fedc1ba4722a6
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:925b079bc34e670dea20d809213036d710add11d8dbc5a5f7adc96a6d5bb494a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:64fd4449ea277decef2cc2fa1f4bdd7be36fc573c166bbfaa382c5d6646ef5ab
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:92c352ce18d707ab37272b0c65f73b34b922f6444c6a10987527d79971b10e14
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:942a4504c553542bf929ac8c9e269eb71bba76c255e0e2d936a1b0268117626c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:3aac7000b340122734a01e7f5c7d20870f0a6956547572d826e5482f2f1e7d20