Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda12.8-cudnn9-debian-dev, 2.11-cuda12.8-cudnn9-debian13-dev, 2.11-cuda12.8-cudnn9-dev, 2.11.0-cuda12.8-cudnn9-debian-dev, 2.11.0-cuda12.8-cudnn9-debian13-dev, 2.11.0-cuda12.8-cudnn9-dev

Index digest:

sha256:786bec63a9a779a2bdb9783c2bbd2b69688a21752e8277ea05f4b10709216c82

Manifest digest:

sha256:a9a159d699ea8a7647b4708fdcd7202a9beaa1e1b706c86412def68f33c76d45

Size

5.50 GB

Last pushed

14 hours ago

Vulnerabilities

0
0
6
5
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda12.8-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda12.8-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:0d71dee5e86021634bf44eff61e106124a5851b7eb5dd37a9283348c36f1f7ac
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:8ad95c4a3c884464c99e987c81a6009d208acdbbe01c8b5df998cc4719d0590e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:cfb0fb4e606b86386dbea4ceddd90f40d40b3760072a3479e2d764026fbb2977
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:642759b25c646963a7e37a76c382b61505552b2c9a7384dd47adb5e905bd8f4b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:f8680accd908d3e25327676da81bbad52846a95fe8aa12dc8aa103246d6f66ca
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:34223a86903d3da58ba736a9f78b9c8125bc40116e45286e644b2d4d671e2101
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:8abc1bd02f79b1eaf38eaef4a0c0d33db30b077d7fe1f15fb4c8b215cf454653
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:db95c68633eeeb9dbe2deffca7ceb92e67d273162ab6200824cc161383a9ee5e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:056efbf10e60f8682ebd155a65ede1bd72faa2fbfe8ee0acc29cf887da554d6b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:aa79b9e4484561688953a2fd0f28076f0413cfce7b4676b4275d9de0dfd19972
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:843283e9e0a62621ef9c440c2256bf352a90a4e9805555ae7cff2fe8782f5811
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:1828bcf03aa3fb5aa48c3b70be68f50193673b443b1d3d7c93742d654a73b491
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:4954a043a7db807f896d2d43f2605f1f4ee5448aec1a6fbec91d71efc10d6ff3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:ab0c8b141708e13f6d2ddecea6b653ae7126b56e1e6f3905b17ffccb0742b913
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:bcaf456782c808d4a8292aace72a3cfbd0dd66dd2f206091cbb25ef0239e31ad