dhi.io/virt-exportserver
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:30f619aa4c118b90349635d3017a257485211632689c5d90a177eda56e4abf6b
Manifest digest:sha256:a07983388fe257cb48dbd4a8f4ee902a138e55bba1946723e1de4ff080c60868
Size
49.85 MB
Last pushed
4 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:221f391e98480d8837fa046883d464f41e6b4717a03bb80674c5480c74f4a1fe |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:7669e5d78e467f5894ee9af9cf9100b801f080627ac416d72ca73fbe317bc188 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:336dcd6ddd75b13fcde3d70872793a3326753032a687e31f90f7c48c295f311d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:0aebfc07d61f3be3713d5611f217f8e2f4da3765819c06e36a42774ad2c73c87 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:9cdb6cf3ffd2a4ffe89183b5b5599add3d20859bca5200839531a841750983aa |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:2ba8e739df1b426ca6bb36239977352182c44a6fab9d0cd306addcec6506f21f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:ec2bfbce7dd4d5afe386a197d8b5fb0a91aaf903f2422e263dd80ee196a00b7c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:6da1d6c33a5529caa8309e4dda4b3b16de8f07d788dbe2e42f2232e3891109ba |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:5bd41254e9d9ef465cef61c60eacefcdfb763a81550a180db5b3ec4c72de7df1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:8b13d1b6bac2e45355ed497c5ac1d82aeb12ffddbbe0b72e57e1fd94bc8bd29d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:33d55d363b857967be16caf3d7ca9c6a346ebfa4c429e756e858d33b0656b4b1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:af5cca859a9947431c9c65bdcf2da5d1fb927a3187bd1f0f27b0de03847a69e3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:21556d6fd8c762d47dd1c9fd2a1255571197e7c800f9d91a85b329dc49035bf0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:5d3fc03a9b53124caa137172a6f8c920494c074412ceb411f31a5cfa144090ff |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:1bd5399b6fecec2ad37209e1998e43757f76ef918d4c6bb483930ada0e721f56 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:b34c3ef659ebaeed4da32726175cd5701fec4c731b685fbf5c19d66ccf371958 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:6833baf7d19f0bac08289e460cf54129f4961b99a8e4885b51e8a73ae1f48903 |