Sign inSign up
Virt Controller

dhi.io/virt-controller

Virt Controller 1.8.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev

Index digest:

sha256:1d80e971caae850533df28ed23d41c0fc9bd0cf93277d1d9580e8d04fd36a06f

Manifest digest:

sha256:cf7c9dd45d3fdb494bc28bd5cd0b1a78d3f3a86101a078081057aa84f67775c6

Size

57.47 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-controller:1.8-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-controller:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-controller@sha256:d6c9d31a718ecc4b0e409990ec037ae776585595303ec2442895c5f268b235cd
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-controller@sha256:5b432ea265904637e3db58c8adc8b87a3f2aff7d7b010d16923ed74a77f47f85
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-controller@sha256:a34ba8709631fed1798ee952143c344462d36f1098e028b9fcdf926b08e9b95e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-controller@sha256:23d60794dd0673ff0309f109c83201f2c9d2ceabaa0a8d26ebb9842fefbdf223
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-controller@sha256:68b30657e5b49c7f411295eb33f83f152a29e6b9f55f0f61da8bb16d1ca514b2
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-controller@sha256:6fef3ae7aee6ef31339edf937290f65a4e7680208a3daff90d0424e9bbe3051c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-controller@sha256:7b384ea680f4728715934aef3c7f72bcf27b8aaf4ab7d0ee4e410e35dd5703d5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-controller@sha256:8df1a962f71d3ac07755b241050a1ff099b637145ebc0690fcb82c5488d146b9
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-controller@sha256:4befe1ffbfb56a3c8cbc861e4c4ce07b88969835eb7577a1f08af8cc26debf22
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-controller@sha256:7f16ef5beccd2356accbbdc50a68812e6ed8f0429a96a69660c1916dbff8636b
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-controller@sha256:b4ef1923570c5c09d04db8b103f70b8f7b65f9669222fa5c20fb2d155d79bad5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-controller@sha256:604aa6d613002011ae2482690baeac39c47ea63ab061322e44563fb6552993ab
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-controller@sha256:ec972c0f082321981e64c8fdf665e982ad4e70523755d3f12a31b8613255bbc3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-controller@sha256:8ff512526ae9b264d96385b71cbb22369ba8d7459aa581202a8f38f4d67f7738
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-controller@sha256:93a3d1274d87e73a69dee31ae99ff2d303757256e9363714f27853f5e7a5d993
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-controller@sha256:932d041456b2f07e8ad2a46cfca34f17a04b58239c4221628907dfcf02854a44
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-controller@sha256:ef28f3ab281b9a7f8eee4d4ff0b9e95c952ab3a8de3dfc6f6d9343f39df9ba35