Sign inSign up
Virt Launcher

dhi.io/virt-launcher

Virt Launcher 1.9.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.9-debian-fips-dev, 1.9-debian13-fips-dev, 1.9-fips-dev, 1.9.1-debian-fips-dev, 1.9.1-debian13-fips-dev, 1.9.1-fips-dev

Index digest:

sha256:b785af0b55accec81919802e2da82264148dfc641ce2b17e9a76b11530144a77

Manifest digest:

sha256:c2b6f61e2ccbd14fbae3c2856e51273001aa07058e88695f53cddebcf9c5c35d

Size

165.30 MB

Last pushed

16 hours ago

Vulnerabilities

0
1
7
10
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-launcher:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-launcher:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-launcher@sha256:86320c18285d5bb6540c99b6391023bc4a4df0695613f2d0e0f411339bf0589e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-launcher@sha256:0c6a9e93c145c0cfb8279c0ccbd2b1f58f288691be6f7719e9fafefec8b2f06b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-launcher@sha256:db89dcedc9b9e0ca396fdc246ec459d53bf964cdeb43dc963bb8104879a67620
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-launcher@sha256:ba1eb39b06712bc07f2a8adf0303a51604d6f81c1a044a784e48b0625b5665ea
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-launcher@sha256:6740781a24c89e10eba323cc2d7aaa88107ecb6c0697116c0724c476df3db58a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-launcher@sha256:0e49792948486e681588bad853f9fe3605ae928105d2dee1df9959194b247412
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-launcher@sha256:60bdda4127098b3c63982f6abdb674270ca6c072d87787c7676e99db7fc295f1
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-launcher@sha256:a937117e4b8475203c39abf0014d8f1308c34e4f8bd7d4201b5e7bfcd21a6bb5
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-launcher@sha256:5daf515d2dbba922d0bf19719f0f330ed2c544e3355fc77d76bc6c346dfa9edc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-launcher@sha256:9856cab4af5a7bb738180ec740d420fcbe296e5dc54c5f716ee0d9bdacd017fd
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-launcher@sha256:4d1295d7af926e7433daeeae6e039b80729c7133dd88862456a559cb96c97baf
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-launcher@sha256:e1ba5ae6a7da166174ddeb6f1fae33fb06144e4b4e75a5d6458b3f76f5be9cf3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-launcher@sha256:9fd659459abe8d82f094e8819a9571d5d60c926a436a8b1d2e74ba49ec06a5b4
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-launcher@sha256:ef611965fc97a33c1db37b9217461b6e0b8fc89d8f1082bcafceadea7ed5ead0
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-launcher@sha256:a69ef21b7792324a8241411e8d68ff5d47a9e7c4be33a93b44a94d83dcfab03b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-launcher@sha256:a75df16ffb786c687a00676a66e4f1ca376d5f317f15d24969cb09bd046f8533
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-launcher@sha256:9ba0e05640863ee568ee0dde9bb8457d190e8a3d0bcc2f8932be48bdd28e3672