Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9, 2.11-cuda13.0-cudnn9-debian, 2.11-cuda13.0-cudnn9-debian13, 2.11.0-cuda13.0-cudnn9, 2.11.0-cuda13.0-cudnn9-debian, 2.11.0-cuda13.0-cudnn9-debian13

Index digest:

sha256:5733d91c1ab913ef654c35f3d20fa9baeccf747d49ccce4606829ec3376359be

Manifest digest:

sha256:8dcc7af832cfadd09dbaa492ce118ad1a9bdc5b2079fc6787dd38814d83f2f8e

Size

2.33 GB

Last pushed

10 hours ago

Vulnerabilities

0
2
5
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:10d264aab47700f8c345ab644ce337b00c7a8b100b77e10c79ae8790fa663a80
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:7080635ce71d635972dea5ef88859591ab9d477d14c66b64966f2e6cc4520b66
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:b8d2af3ff8ea07b0e65db989188bddfd957bbbd07ee3b81cc71b851b9587729d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:ee257df1f52bc983374c7cb7066721ea3f1d7008a31c08eb71ca9b48254725ab
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:fe3914a33615568a3ed603991c8200d9e406979ab1f25b12499b62eb71e64c20
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:4a79b68246eb9f0b2d529fb91db1011c65e7f81a7edfba2e7f2d918c62beb384
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:e6d34300de4aec6fb2028b4a6ad92e5f7ded902d060cd4ea9621f828c335040d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:b3751553c0db98c17877f551fa3c82a21aa2eddde4af27b6b8b8b5df43c2f642
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:271ff93046f944dee3e70e4f3e31190c54430bc29aab597f5d521eb70b61b329
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:0f9f89a2665d2bbb8637ba4f0608c000301f6e1bc8be0bca9a42b6ccb7a58886
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:d0c5da95d6885ba1b1fffeed7afa529ac3d665fbb33d421c40561b9d2979b160
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:c46d2ec75b20456d9dc92712fd26a36ae0fce0ac305f64b6393ff0aacde702db
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:0e74d8a7eafc3ad993483d0896ffbe2ed45a55e2994f9d8db6d4a9f46ae8422d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:ff9d9648572125bb89bc6650fd337b362aef2f2895d19ae25c80ee773b5b9371
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:ee642454ecf682c1d4b9343e08c548634530ed8ffd526906457407d6244be75e