Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:4c7d451daf8e5748fbdd823ff325c7f2b842c2733aa83ee8ab9b6cb2f52c6a4b

Manifest digest:

sha256:67911be716f7c9d09a4cde1ff655a3ee733db4dd05bf2931f07e44bc8db5694d

Size

3.59 GB

Last pushed

3 hours ago

Vulnerabilities

0
0
5
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:c8c7c63c4ead61eb7e90b7057ee21f79286e5e98992c1fac4ff5a6b16dad2351
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:a7842d5042f14b7811604f0e6ad5829ae5cdfbbc43504419da83849053032f1c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:8618ba908d023f9eb6dc95006ff79d7d3a1ad9ebffd28550ad0040c13e2019da
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:61a653990c81b6801237e3f4fbad3f38e4a2eb0090d71fb4654e3eec5894d2fb
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:b0ec8e5e8ceee090762240e04bec4aea24c19afeb570ff4f3b8c59d23b22350c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:99bce549ca8ea20e9e3e5cde2f6f62076ac18e0591372b2f2b55985c66b23327
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:7549aa0f2e2206572e2891c7070f4f8ab7091e6d1ae0843fbb49a25829447bfb
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:1a6d4c7f521d1f9472c0652b3a4f886e74799cbd72de182d141d5c2ef96647ae
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:281964ce0c01f5f28c24d1b7890787a9779fbe7d1466925c0b3f29362221cac1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:601db73d073695edce45c02d40e4f55e011182d9ef0866bba0ce455e228fd1ee
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:5747303ac354f8f73c2aaf49698668b7059c3ba69e532418bc4dd636c484a85a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:64cf6a8f805aa1a96651af3cd88505949de33b998e5ebb266bc71eca950a9d92
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:428615bba5e5c90d94ba898ba37b60da1a61ece8f34e60f6e79b7cd404010e24
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:96cb81c04aa24f98868ed128108dbf150d848ef82336ec33e29ca1a0354d0ca9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:9f90188676ae587bdf471e03512f66be96cecdbe410b011bd0dd78cec1e424ed