Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev

Index digest:

sha256:a2ffd1a81275506e39c2cf6b3ccc050d699157753e5df3cc5b64c2a908231e6d

Manifest digest:

sha256:3dc236f8d39e98bd24c94827f6f871b758fe81c7de54d31f3f4b19984633bafe

Size

47.84 MB

Last pushed

22 hours ago

Vulnerabilities

0
0
1
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.6-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:8fde6e8748baaffd5b690e522b84e1ed0ca4904e87c83c2de388146705eb6bb6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:eaacdf83eff00206bd514e16f0c250174b35ba665a55794797c8eeb025c3ecd3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:c1f6b3098473abdb3a07a06694ca66fd46942f4de3bf5d10e6f47e1af7a1c118
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:e0773d1e390a3cf096225f358384c4df5845e146c2dbf1336f88592f1132d701
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:9a0bcbd5c7c38a2fcfae5b5b3b710a152f7e4a854ea0b0144a2fb801b3b76564
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:48cff84c32e0d4ecf1692887159b3175d2d68fcc8e059f1b290b551ea81a344c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:e3112645cbb2500e75fb10f16916088a660611f4c10e68e0e18e5cd5cf5ac258
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:3ebd40337702b9a2ca20a803917bdff35f32b9f986794867636874f15d5c9815
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:3223e0ccd3a7a2d24c6a7ae5680672843f77905b05c1dde545e071048a628930
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:e8dc7993a14d5f945bbc35fbdb73e3d160f35e37f29ad0e1713e46f8a86b0919
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:82733816362cf344193f622bae346c13bfa3f00b446bb5aef44f9761fd51adae
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:59a4ce748b9ad1424ac0457ba69020fb610494e6e8d627c1b330841d292dd0d9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:39579d6deedadf0b226d747ad33cf83a67645dbda77b1b7fd59547055a32ccc7
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:315d47c6368a137ac67c6523cfdf7047f76b40cf3ec6bf9c126e927b24f4a7a5
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:e2e795589b22995e34702b2864357f7828355b8febdd1e1453700ce5ac74a76c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:5d1791893d4f736d51a1c6d918b20f49b769ab086aa70d7473b135223294f8ac
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:b3bfdd231af43516eb138972b827498fdd361d8494453640d3fc114c6b1e1831