dhi.io/virt-exportserver
1.8-debian-fips, 1.8-debian13-fips, 1.8-fips, 1.8.4-debian-fips, 1.8.4-debian13-fips, 1.8.4-fips
sha256:eec01b3211c55100b3ed72dca16499ef973b396e3b57a4945edf75b74259bf29
Manifest digest:sha256:ac1ca491e6052e6f1e7aae42c123dbb1746bb91741b2836158d6e91c69a5644d
Size
22.62 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:94979f73b8f661b6954809eeb2650ae0edfdbf662fb31537a6606b6c443b725e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:65ad4f36e65d3568d1efa731aced2bdb9185d8f8d660e25111237d492d70a4d7 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:2d5ac7e861520a6ae5d8b81c94854414c5f1367152e8e0b22b1cadadcb82ad46 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:b922a84054073f8c0961fe7381b55cbf05607225f180ddc5c2c998e7e6cbc97c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:d71a7742ba556b1ed3070158e4fc4428f432f3fb59ffe694ce08cd2a39a2e9d6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:2b17707045329fa41db969d39151e9d5c0598cf0db8b37a7f26e60f1aa81a5d9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:091fc0b4e1f1a8615a5e8847e209e72a072fc20fcce983a8d5035b08f645dc46 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:a4b93754c76f512e9c1686cbaf1bdc392e886a9399f475cea7f5de94f38a0769 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:f28f05ac7c3cabe11fe25a1e0c731ef31200f196a1e4ac525db86afcb3d6312a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:90b1890d3aa76eb79928a06c7c8e955612c64297324e28a2d677d5d8a43b20a0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:10db691b23015457c8889e18a26ee6a52a1d4139b4ba18123a5f40cc4f790641 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:5552365118f3880befa010b2bb2a2004db5ab16ed2ab0a358f6c4cf122331a24 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:ccb1ea7d5374f7ab0dca5e80f8ca58c7fd9c04e10be3803705ea4087afa20906 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:8aacee548e3c0cf48aaaffb20f5b2513f6bc1aa1fd2916097cdd9c9d1716782e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:a0d2056c836005a71eae48ebcbadb02c5ee0e6bbeb49382a7b686b1687ac9a52 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:47e7b3e654817a24b049a8d74de8b9358f6f72348da50d1e441b25060c281373 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:82b24653fb1696be2aa8717eaea887483b79937913c04f0f6d8e1e31c275362e |