dhi.io/virt-exportserver
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:bc2fb63f672bd90ede301cedd8cbb4680bd6a2ebf4a7b3021e999d1053c079ef
Manifest digest:sha256:317f38283117699ea816eabc2f28f17aed1ac1062c4f3fd99e40714de4ef4f78
Size
49.85 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:6c1fa8ebc7bf1258f0cc0889a8f5b939ab09f08f9246a026358bfeb14aec1f36 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:f02602395f8348b7c211dfafba274140557c583d0f830e6a8d47b4d24e98934e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:0acf8eb25dc633f8e82e5614d567015faa82f0a530d02c647a4c3d7dd288b953 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:65b8732915a17ec6c71aea53b33953fc0add2333d9eccd92d38df625d43cc72c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:a2d8ded39fe8e2834a0ab6ed64b8fa814c4f8ae1474ad4dd78bd3d65ff8d4558 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:e48f32bf473191c21f818478e0a9c1366c36d1293585edb8c5cf3d3829cdbf51 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:a045c8f6658002c033c4a21ad6936e0d550e5bcc5fb87e290fa93e07dbd347dd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:65f5b0ddc68aa1363284ae703e8d377a312b027ca7e3688f4bd816917652f452 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:bf742e5e59327c9a69bc9edae906f9d4089a8358c89f06ef78e52abf92c462e3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:6123e2951ecf390856be750aa4a10e7cd00996d12132fcc7b3eb2b16bd0592e2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:11bac8dc88a6ea44640b26bcebacb083b70888333468f6776dbefce3e0dbfa51 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:6e1323c9efad551184d2dbae3bb26c40c3e57924f54116a5e36eb834bc632386 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:6e0092c25245309f635a3eaefaac91ee34c60fb65cd0a5533f49f10a1b066ea8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:d9effd5195ffb52d68245cfaadbcc78b9e98bf363b04bd0779d5bdd7265a282f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:05d159d62cedc59bba2cfca34d62139da03e359730b7247c8e69021ccd21449f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:2599a5d602c32454d5fb8483cb7387a97c7765fa98cdf364d57b2497a2e93e0b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:46c06b238bf4313cdcf0218dc96331efa38c6015b4dedb9629c48c03372e10f8 |