Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.13.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.13-cuda12.6-cudnn9-debian-dev, 2.13-cuda12.6-cudnn9-debian13-dev, 2.13-cuda12.6-cudnn9-dev, 2.13.0-cuda12.6-cudnn9-debian-dev, 2.13.0-cuda12.6-cudnn9-debian13-dev, 2.13.0-cuda12.6-cudnn9-dev

Index digest:

sha256:0b9dad8cb713cdb9e893bdd202d11cb59187753bbd8d1978ceefac1a347dc762

Manifest digest:

sha256:65b17f6696bf5dba05a4970c7efb113ef83c9fa03b351e806001ca64fa94e7cc

Size

4.47 GB

Last pushed

3 hours ago

Vulnerabilities

0
0
5
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:f53c61a1f861b831e94b082149857e09a3c3d603e25a248779654743477e008a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:f38bc9806b95e8d09d534a8d9fb3e7adce0cc89f6f048740037d35d28985905b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:26b7f5ef2d4f06c380ee2545b1f7201693d0b319699419f4ba9e746f23faef5d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:7aedcfa614a344705b863d7ec0ca8be5db426a8d645201159d28fdfb4d7ac089
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:a054a620f76e53f79985b9a2fe11b9623f9ba6516dba0a978ffa5aa8368d5ff0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:6545cc2d1dfeb2c73d98abd214bdfe7efb936e475a76f33297297c32e57c2501
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:c4199b35933fa00f0512f82cb8a64ce01cba71271a7c614f45fe47651c025e0b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:07d8dd0f756c6719c40d2d283a4220210cace6ead0dd41ac56419caf5e47ffd5
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:890f88fc2372ea8a190647782cad3fc080cf63531ac482fcc2a3598f062f44e1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:d939d3f226873fdad912614f6fc4a928f7351bda0a590c8a243124817267210e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:a75ad20732ce02193e282f1992c99789b09be3b6dc885b2424a499dc018d89f0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:460fe54875d2bb6de7f2e333666b1e10f07b2d7aedabdc5af1aaf0de7a02453e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:6f614939301357e7e89a55c0fef3353e28c18f4c10cc0432263a5bcda84a4c85
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:438db55e3c9e871959baf89a174cb97e1a08384bcace4b6c569a2c58b2cc4383
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:a4a9d91351df2d68c3c965507f06bf36d282a776d1f2cf48769a74ebe10fcb44