dhi.io/virt-exportserver
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:8f2af7d6fbcc87db7fe792f6719d97cf1760b1135660a1b7d3e5cab53075d8dc
Manifest digest:sha256:1cfb8339a3c9040a756b1c5d63b04ceed2153f2914adac6ac9591ced0f92c0f7
Size
49.85 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:8a5a8a1625a566cfac56401d70b0e5d64db93d8f807d0ada60387d4d82efd2bd |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:e1f4ce643fbf75874c70fe5e31c33011162f4d57527cc4694f7f1b420e942668 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:16b013ee107dde41bce1ac81e5580cab1fe261e6e883f2720df8a095488c2051 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:66e4281765b9308a1f7ac0216ea63221e5a4a7f4170a4a92c35bb12aeffc5d18 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:1c411498c6cc074a6077c024480186fe9847d2f55c147124c79291839c8664c3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:a0ae5e8ed21990a8870c5ab0a155e96391c493fef0d46d3f8c8b8740921a958b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:da6059338e58404668158460f15cbd78300f2d17a549d74cbaef3deb2300b3e1 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:c4c96c40bb27b37fb5447cb9bcc8ae2004c8a9851bcfaa91fdf3f78ea149548a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:19d5a72f81dd587bc0eccbf530ad257facd132f3511ed5dd909b9ad96f883e38 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:a8528fcb78f61c7b0ae15942ae27fc8b754d50eca8ea97b183ddadd67b9cf460 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:3a7ed7a19a72577a6cb37e4c4df7a4fcb15e78a0ae9fffde7d37ca2da0e30e2a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:26b039aff8fc8a8fb68bad494d22dd56eb5d2097c0e1da3947869c0f00fe9550 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:d555442118fe435bd2aafeb0201fafa1addaa27827ab075a7d709f58358be9c1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:72f8a815451a7bf32710344cd2d7f54d271452f3eb4b50d023f7f2d9bf9d59cd |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:7b23e7c1ce482a022ea58124d82b1b8815b7ec622525259929279b43d165edbd |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:03e4f57a0295a1c6e2d4b5c5d0c31b8d3f798c0683d0436b76ce421cc1d4fcdc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:ea9ab9d9a064ca71ab829e59424272ba72fefae482927f693cec58eeafb62cab |