Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.8-debian-fips, 1.8-debian13-fips, 1.8-fips, 1.8.4-debian-fips, 1.8.4-debian13-fips, 1.8.4-fips

Index digest:

sha256:7676efb7410373a6ed56984ed9d7cba6fd8b0d62baf857ab49c8ddfcde6b6fde

Manifest digest:

sha256:e2e09faaec3ddb928d9ed651b34036e48bb0a999b436acd3098d1b1d4be45143

Size

22.63 MB

Last pushed

22 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:fed6c6db077574a9ef96b4414b152d75b89cbe374d3c079314c4570f7608b702
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:b3b3202a0b62fe3e6c4f21b4b4eebc46e342232892177dd87b93abc4e7281579
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:c605cbe3c9396f1a057e09cf517c251d0203c3b4a059cff5ed5c517a37116030
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:c79b96b1882c4b87335c4de3d98bfaa89535e8f7a4acd70b589694c60bfe9fa0
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:7b7204a647e6741601725b984e04a3dd5758994fb8f725dd912d4bc7b8d1065b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:d56e712acd57920fa39b222594a62eb8c54c0f071ca91863bcaea4bc529631c6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:d373b791c96d7f1df42a327d09b289ea4646139ac95d5bede0b54b02555723b7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:d2ef2007e450a7d94a5af0331313d1a86a0fee140944ce78496eb5030b765734
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:abfff3d29c0f4af582aa5e9ca1a6153fbb8c9a9849fe2ac41f8220ab6119fde1
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:00a01cb05ae8c79655862767db43bd0d6d18668671a1b889fe8946909fec65a4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:ae2544f7dd6447e24cd820b8a65129a16d070f64e6dadb7a4308f2ee7e228f6b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:70dae641c1553bdc1f2aaf3a44e1fe2dbfb3a52ac40b862ee3dfb6ed6a1b0af5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:deaaea93802ea083aa4aeeccfaec34ff018c8fdb9395628a269457b1449a7df8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:f49a26c1d1a1311c21e5a574813b072e8e18d7315c46dbdaa4bd1eff95f840ab
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:842c013821d7114812b741e8a35d24c5d759fb3b09a21f5d9baf073fdac20e16
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:94fb97cf594dc1c4a9b7fb087ef2fdf76d2b359994dd2aec2828ab64b345ee5b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:73dcf34e555ca331ebb389e67d2363f6692607978cb263ef91ee03a526180b10