Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.13.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.13-cuda12.6-cudnn9-debian-dev, 2.13-cuda12.6-cudnn9-debian13-dev, 2.13-cuda12.6-cudnn9-dev, 2.13.0-cuda12.6-cudnn9-debian-dev, 2.13.0-cuda12.6-cudnn9-debian13-dev, 2.13.0-cuda12.6-cudnn9-dev

Index digest:

sha256:7d08eb1e951c9409e5adb2eb30ab9679a7ffdaf4b4e0f8c1b6612ac8fbe3812c

Manifest digest:

sha256:05324c3b4c1d74ac2b41461af691dae75b2fcda587d89f6f9b824434d5f620ff

Size

4.47 GB

Last pushed

4 hours ago

Vulnerabilities

0
1
5
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:f688af36b7413544c770276b6a2d1a3fd24b2211b7620539e0bef67044e8d722
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:1fdf8b324b9b1ac353293c05def9dd3bb7dcf1b3a48528b31352866e0c3192ad
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:faf24ca74960626f71949d7e641bf37fc5ff577ea5e014abb2545defdfbc5892
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:cba2a410ec5923121665392ea6ccfda7b70755b3ff7b4e8b396e2bbbe8da0175
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:d415901d48604031f6e723f83b1dbdeee6f0659b986acd86cf9dc87a183bfd49
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:d7751018d20f3d28e9b1f235565a9dc04f74f62a17cbecfcd4c2dbdc1c65e0d4
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:ebef5e8a528c3219d91c3e2f9619887e9074d1a557bf27ed166a081880e0e041
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:032c5a49e514ea7a8842264a77b1ef59a60322a391e1fdc7dcbdb545f691fa05
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:6d57a3e6983c87c95576c61d3d4c1d88eb802368d057f2c63ac1f0d62572f71c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:7d8cd33a7d36ed77307d02e88943458cece07bfbfb5c773b6f574b374900de48
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:ddee1829928d9b2fa724a06abf4ced33bdc2c5a6b0a372023958ed38b73871c6
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:01113869f6ad5a9caa43063e3ae3d0a786c3ff503be00a4491d1aba4fe00f0aa
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:4aaa5368a48a0fe4ab750dc6afd8f86554a4eb0e44236435d5ba23d0a3ade8d5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:5c801d8cfc24321d4e09959e225e60c6a1d811c13a5f52447e8291f395c3a9f0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:e59919f2f7b9e8bb5a23d7817946212ec7b0c2199f1c4be66a5c8ac8fcfa5787