dhi.io/virt-exportserver
1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev
sha256:4896a562643fbb71bc0eb39cffbf7cbbaf04a936256981f2aff1faca40fb72f0
Manifest digest:sha256:dd3f4fdbaa67c1c1f0461982e7d6648eb48bdd015ea868d21f2b85a99011ffef
Size
48.93 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.7-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:12152eb35e1f6259b827799854cbf60b00fff8effa1549d24e3038fc39338302 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:3cb3a322cf3e4748881e6d9e31947c03aa51b8590160f45fb079b507a66de58c |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:afe749a81a658fb852f2a941a1e39e6c840026b83afe52ea22dbb72d112e7581 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:bb187f0614561744a7eca55b318ae5734a6a9ed66d2f62bc52dbe7cd66180016 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:c32ff2c19ece0e7f8b6461d3684e05246b11fb8046125cdf0861ef2e4e42a753 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:cd467d28f646ab4fbd522584fb8b8b0c53eaef377a1726ebb35edee318eb50bd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:70c7a7e60224cd88dd528f92e196bf580c20957d7fe0e6c00aa1f8fbc3b26025 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:fda193d29b531b5cecee2ade1899137b0eda2aebe1c563cb4ada2bc4bc04e3c3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:3dd612136ca4c312596e19a50909cc04e0125b3e8b25545d3f4df70ef708eb9a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:f5f2b7c3593719456feba3967360e87f79934ee3bb9d4ab01c2aea0a498d3ff2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:12f33dbb537b82a3302181bf00c4daa2991eee9b86e5a65f04c5f8631906ab91 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:c1e1ccd94b3ea96fe1ea86da580ced33046798be66aaa5946cfa79e3a4a2ca88 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:f315b6a31c419d9f57253f6b1a94eba445825817398003d9f514ce2c8175e5dc |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:9787833b06a29831b3bfa416877b9841511392be3b0cf5eb92063d43c6189fef |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:e7b35a47491d58ad8ce01160c3f2655348c543b53cc7d045a2a27e70432b6f05 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:e6b28a90b0f10b4f5a5ae458fb34af8b88f6a3191fc2df5bbcd5af6958857beb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:8de922d6f4c5b1fef85e22f981b8b6f7ad6197755187803f487e38da776fce74 |