dhi.io/virt-exportserver
1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev
sha256:e5a28fa34064c73f448d941bf173652a880748894b408737742d85e0475ad1fc
Manifest digest:sha256:4d1d0203713034b5598761f3f9458bd27bc1578e72a10a6109f10ba369e202d5
Size
48.97 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.7-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:fdb8459490eaa34f6637aeee028e710a426305437e98b47accbe593eb350de51 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:a6dbadd4ac46397eb93c818d93a0cecb656068d3209d9ee41cefc21af85f51fe |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:f249225891b3aec7578dc522d449a7089e9160bc8d7d4d47bc9110ae60a856a1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:edb2afac9bda0ba6bd00331f8ffdd06ec4631346ae23a6e9ced8e336f2b77ea3 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:0fa34166ce25b7394cc831255cb90cab6413d993163a70074ff05d83ce2a3de7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:12b779ff340019108af2e4d473928f54a92c20c23bda308d2a2e55fb1ecc29d7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:e68e9cf5fba37e7d99daccc1101db4d5b4b5976ed06bdeec97f20728904be453 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:bb08049a9d9815c39f42c8059d41ff9cdef57f0b66cd13eb9f3a1f3d54f2ec28 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:e3b32d489dba6ddd1ec6ca83ac4da8f3d418efa2665f54fdd8105384e4bd53b1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:01dfe342a4b489365dc36081cf46da9724c58e7c304f5e860beb2cfd52fc557c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:af2ab00e51898792ac739101306271b9667019532f7ac4d107d28288668643a9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:e99ad02439202c6fdee0cb8b2b97b2fc40720d9b5032e20d1391906f53767025 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:5c991bccf64a31bb16a81effbfe47b978ed99d9f68cfe9cdcdc2c6882905c927 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:4cbd40d13a95b7b46db5e5c1b23b14bfa348586848caaea0493381cf76d10bd5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:994c6266653e73909360aed96555e222908a5113bd6dbfa7b780520087f2b416 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:467a7da65b5f4be5964d7c772da6ac82476397ce5b8a3745b0822a77c41936fb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:c1845e05be5ca92f72531fb544656344476032dc129204a27c1c21dd8bf8a9bf |