dhi.io/virt-launcher
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.9-debian-fips-dev, 1.9-debian13-fips-dev, 1.9-fips-dev, 1.9.1-debian-fips-dev, 1.9.1-debian13-fips-dev, 1.9.1-fips-dev
sha256:4378e21582a41f06cb778e463770e7d908a05f62c810eebacaa0fc49c8035ce3
Manifest digest:sha256:24a3b231fbe1da150ddfb8e719cc142a86c528ee712e86bd5141607ca65b0f4e
Size
165.30 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-launcher:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-launcher:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-launcher@sha256:10157480069a2ffcc7fd71bfe7b83a7e934c5bee9a861e5a902c1c6e214bb6e8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-launcher@sha256:ca2268ffc989144102af1b6a1efb761b5b9f979348673ebf3fe8a4217fc29759 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-launcher@sha256:9266c893420a31c3e94466dbf6f558963b999c6371086660d67134c9d652434e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-launcher@sha256:5762199aacd4c2876581eb3554af7f01ab17fa71fa0655182df161c7c5b8de96 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-launcher@sha256:c09bbc240eacb2948b7cb97017fed4454cbfab65c5290e1ab65ed910ff2710db |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-launcher@sha256:4b7339e8b29e84a893998bd0f75b70e24228760cac774b075e8e06470f319575 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-launcher@sha256:f58cd4407e0da4a6af527d42968d33d59d5810d3e2f55e9d456b181f7aba28ac |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-launcher@sha256:5587139057f0f8405daf990d15cc79e038c65a30c42c6b93591237c471ffcc18 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-launcher@sha256:75f701383006ae62a5201e7a77160f46f97a2a2560eb3e8f092ce883397bbe1b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-launcher@sha256:00823d16e1f8a5a03f1b9924be4e761cfda8639b6980b54cfe283ddac7029081 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-launcher@sha256:a81ec597536ce351a8af6bbe5912e82dc89c5cb6a111379b484504581c10afec |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-launcher@sha256:2961c14575fef80ece350d1c12392904ec2bd84738b9110c1d8739bc1240fab5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-launcher@sha256:707033b77e8426a27ebd8d4ab862f29e644d06857d04766cf6c32c3892a7ed03 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-launcher@sha256:fdcfdada989890ea3d2917bdcb1ae934d96619774822cea15a648a8477c13f84 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-launcher@sha256:503d0334bcdbbc537879ff9309bc62d5bf716527fc10f542180146415bc2b35b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-launcher@sha256:e7610caf1f49ab174d846ceac56d5693ac1889f7d7d70904cbecaa1450698c86 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-launcher@sha256:6a15de0358dd0dfdc8b02621649f20dbe9f86e3ccd6e93a6cea1c0ed82c74bcc |