Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.7-debian-fips, 1.7-debian13-fips, 1.7-fips, 1.7.4-debian-fips, 1.7.4-debian13-fips, 1.7.4-fips

Index digest:

sha256:aca5480431daa752094b02f7ef4ff53c3534a84e4e373ea87e922d55b030af7a

Manifest digest:

sha256:c830eeb7cfe4f9ce2158afb819dada2e9d793dcb67e1934f0db77c69a8dccf59

Size

22.20 MB

Last pushed

2 hours ago

Vulnerabilities

0
1
2
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.7-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.7-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:95604843e9d4d74d62f5297077bbc2c79109691d953c8c5d7002811197d7adfa
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:ebdaf4b66912ae1e8f5de4733c7025cfc3edd9d7684e29633c335f2bf716fb67
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:f7d39804dbbb0efb1b2aa1fcf5d79a0dfcdb283fed22dd7229f974bbdab8c0f2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:2962194e1529cdabc007d45cc1dd720fdfaf41839e70e0521b774e3504823227
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:cd2137f7d52dbcaaf743d25c1bbc25c975a040e9526d8726c09152a0955fc890
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:341b2b9bb7a3850c725eaba73c4e52dcc997f8c683366dfc76357a4bc4738c0c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:e134cc9abf3efc34f54267a857bb9e336550a7d89974c77a2bccb9f662e7e1fc
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:1dfa65b4c1ae8db6777004e76c39deaddeae42a86accc45f31d5981e17854695
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:9e8d49bed2a69dd38b3b9d51e04978f4d12807cbd0ff966daba036c94b9eaa81
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:44279176dd6b4a1ae976e005efdb8806bb332acdafef2102bac5b996ad4825f2
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:ef1b2d3a56e8983e14848a9fbd8374731821e24b3cc6940a59329daa17503bda
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:bc25960f6e92aac4cbbff746aab0d4592479b46e19f3e329063c68107135519b
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:169f4800732bfdc00960077b503b0b078afc63182b26fece5a7661d7844c69ca
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:fb8a02b2ac1719728e57c329a8180b15c90fdd3b00bee401b6429d544f2289ce
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:c73cdd4bd2e030323130c35133638402202f1304c68433a9e6a84032d87a49ad
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:bee514a4abe91f90818e0a5c4e04a031df1c48d2ab74f593648bcf7752fee144
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:3dc34278448d2175d83865e9c7e44eaf6e5800bb9581e3bbe8cc4acee13a7d1b