Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.8-debian-fips, 1.8-debian13-fips, 1.8-fips, 1.8.4-debian-fips, 1.8.4-debian13-fips, 1.8.4-fips

Index digest:

sha256:cd42022927c8261e1c16b51284a43821ea971b6d3c9984aab2a9b030169905b6

Manifest digest:

sha256:661f427b94ea7ff6c504a6cea527b27b21b402f20231cd983c55bad9820fd133

Size

22.63 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:0ce250376a09b7aaa02a1543a82992af3e2b88589523a3b248c62676f7c9e02d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:51126b792a0a26957bc8e57e8269637e54c90b56c01ba975a2dc75d90fa4ef6c
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:d5573ffc31c6995c9050db99be0addf63291f995252c4db80f825d7ff00f1745
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:4d87a1dcc2b2588accd6ac433616def7344db6c0cd76a1ffbafd7c8070dff64e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:573ca23cb6f65f29eee9a2436a0a0c33f0bec47000cacd109bf40fcc760917e5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:3c921d18b5a5b1ad199c4b51e544c12d52386ab2f4d54b6fcfce2df23d483039
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:dbb1c9a1ac78af078268fc3a2788d8069516fc0dcf97bffd93d09d7832c7be18
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:35fe508af71192233a786f7c7713a6957eea97fd79a5044eb3c5478fe6035b16
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:5a09a74b7ea9bbfd341664c119e5d3fe2485af4da923341440353843def00d16
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:53941efec3d21a75fc272d73adc6ddd1ce3b64bc39ff720eca83c775f38ce66b
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:d84061ec54bbc069f8033add55bb4053cb2e3ebe328dc8623c57eca13793024f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:047c87d57064abccf74f9cd3ef18155e74ca9581882bd3e50d209c9e1e2b7c37
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:bb48f42d11c3436bfdbf242bd7bca5c60df10696080ed97c875e0622b3e1e9f0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:90c0530525bc1abeb4a608999a8f1b61265b551038aafb35606cd5879c0ebc5b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:ce828b1bc65b13214cd2482b152493a58e4a8871eba1d833fd4feb120178cc52
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:d3f35e700b87dd0d1af23c74943fd2f50cb785ee52c1ce8d2db667e8c1fa5df4
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:4eb8add82eb84ee7894faf5de0d99f2ce05b52698bbe74389a341c7744950533