Sign inSign up
Virt Controller

dhi.io/virt-controller

Virt Controller 1.7.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev

Index digest:

sha256:7b5919aa8872bf7770a644ceb33aa218667ff05823de506ee8101a95e3a46cd9

Manifest digest:

sha256:1d65328810e5060a771f99369de02f1a0e3fa56e36b576b23f385237a65d6198

Size

56.61 MB

Last pushed

15 minutes ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-controller:1.7-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-controller:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-controller@sha256:70d259fbd02ffad0957b4d6d7f341963ea169a5bab407f3d941d1790613ca18f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-controller@sha256:f3d35c87dc1ca291cd1198fa0f1db5119239dd6c29faf9a47224f3faa95f8d75
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-controller@sha256:2d7268d11734894cbab50cc9bcedbeec42df99fd7fd40a92efcdfb0a8dacc79c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-controller@sha256:3925babfd8b8c4c2cb0e3e683af67b72f861ba4bd580a20f3794c7d824a3bdd0
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-controller@sha256:a8bcc4ecc790270577906dbe95a42ec332e28cff89e277fda0cc85209d5bbc64
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-controller@sha256:8c38ecad84ca2dcd58130bc349fe6bcb6f7411ac95964a6f1c573bb834310132
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-controller@sha256:d23ff9403f87e7b1b9963768aa5da85c082bed92875f3fd035b7976954207cf8
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-controller@sha256:b087c76e7428334a98b06ab5d9ccf3c5ca65dc9e58aa6f9a3c8e8c5b895104f6
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-controller@sha256:237d8bb2976e141b48c72a2481fc269a26d9baaba98434ca51df7c1fa46aa697
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-controller@sha256:064a2a6ca58f7cfd4a6efc4d7cde75eac09d2d98c6f8e0cd908440c47eddcb7c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-controller@sha256:96803a0eb50fa1bcb6deabffb0fe89ed6f26c86fdfd247923377b3e6f5fc4c9c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-controller@sha256:bb86281f27f48d65b8bdbca2c43eaf685add5bff2cc6fd9a33b5ee1c26059f4a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-controller@sha256:e6452b75ee98bada359990aa3897019d21e76e2c4a399dee87d91ba5c4dc4038
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-controller@sha256:3942db4712f457f89ff521f2d619931d3b833c388d8f1f0830ba6b3cd6136243
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-controller@sha256:611c667e3b6a719bb620e6a5babb13e936b9852f04e335138171199ab81c0110
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-controller@sha256:bff296baf63bb308217088c0c973783de0f439385020dfcc0897c8bb4e5dbcea
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-controller@sha256:6df99bff735fe4f24f7938a15c575ee3c1cd5209eb03bf22bddfe1abbad8b418