dhi.io/virt-launcher
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.9-debian-fips-dev, 1.9-debian13-fips-dev, 1.9-fips-dev, 1.9.1-debian-fips-dev, 1.9.1-debian13-fips-dev, 1.9.1-fips-dev
sha256:dde8f0bb8c8e8cfd0697b0704a5e926e579a4f103c62979f632470adc0eaedb7
Manifest digest:sha256:383bf2fa818b72b24029dbf59acadef79d83fc2e2b9a53ae3cf7e31e506512c6
Size
165.30 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-launcher:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-launcher:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-launcher@sha256:4312b26cd3ca06cd35dae5e1946b460159f2f1bcd509d40ee9c98c7bcc3fc932 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-launcher@sha256:435097287ec0d78875d1d872000b40b23b46dcd18ca40e2545c6cc4bb4e2eae2 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-launcher@sha256:ee8a173e084c87c263fd05c343c8de68a874134f17820898aa6bd85a98a12f01 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-launcher@sha256:83e53e24d9b835dd9941d56c782f82d294b1f0b0cb1a830f9947fcd37012308e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-launcher@sha256:23fbec4f0f0a6b0bef68d7e71361bfe33a9dafb43b8d25f950e064de462d4dd6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-launcher@sha256:2defa4e05e452c75b8fdd1e8b923fc395d3a2199712c8c89ab520d446c819188 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-launcher@sha256:6d1e72066f81ec4e90f07cde62269bc437a959e25de89065426b39da683ee62b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-launcher@sha256:1f95999fa30b5cfbc91093bf1b8c00c8bd21b5cc252e7309840511f47f893468 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-launcher@sha256:f9baed60ec4d78c195718aa48264b3f68bd9044553823cee1034a73d5d607e38 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-launcher@sha256:317404559a160c334f55b8a5bd6f175566300a3f98aa1b6c0091efbc251d9381 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-launcher@sha256:4f420ab117031dccb67ef6ad2f6623ce808782bc3a53d4e9be65bba03912a906 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-launcher@sha256:e1bd6e3267ab1c6a4ae062ea895e362f8a013d5b6076723ac1b7b9bde7db84c7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-launcher@sha256:b53a6ad1a5fa516ee6089dd5af6d92475d0a282674860bcd03f01a8632d4a07f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-launcher@sha256:f17b50cf1dd28e715678a471a8967f8389e69495ec363ff6d01441388777bfd1 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-launcher@sha256:7e434889a11d23bb6aea46fe9c88cb77b5965226a55157b50dc90196b597c2a6 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-launcher@sha256:4415a2d40f69e3ec5c738ee66204e0b6de01d4141dc7a1d0861396cf202ac71f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-launcher@sha256:bef1ee17c7eab08d249f7a39a8d2163a67d3af79f8d9469491638778c9ef0e9a |