dhi.io/virt-controller
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:0971ac144ffc9c6791d7036c950812fe412e9cfb08019aca930d1a7eec1601c8
Manifest digest:sha256:1337fa3041b82b105645f82aec835fbf61d0c4497db6968a8e3fa49793e923d5
Size
57.72 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:499f4ef235dcd767890e552eb1d5698a6e22d3d16d09b98d458b00c44f584311 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:b76204951153c556ff0c0a7fcf90d879200213639e8fd83311f4baa9374aa59a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:baaf3f97c42f4a18ae2beef1903064a3811f5ada642b20036d6e8846bfabce50 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:be35f2491f07828bf8169f1f173442285d549df479d79430d5f255b1ad1073af |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:aba95881589f59d07c6333d407543706e7910dbffe788dca760fca34b6433409 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:e7d6922a0206c873c4ba092793ec8ddd3eba768641cf73962e36458e2b4a3932 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:5613c10347441b3c78ba6ef845ac7046f1dbad42002015fa8466c8f3d18295f5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:14b2cfb3b29473589e91e7123ebe627ab0d1a2891cc44f651c6daf214c4b01ad |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:041920e955fe9aad897cd3f28dad04fc2fb5749583624d520272069b3c10754b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:f1d9332eab16f00a823a2436675a74b8ec597649a503e04b55328a7c5bf0cc90 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:85500c88306bb1b54508a48b54d3827595f2eab0951cbc23fd2e2b068c93ea3f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:7f90d94590fbecdb722e77c6d52237b847d1a8ee5b4bba1f0718efe4d56450d9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:b923bac937484f0038d1703185ef638e24c1ae487e4b07cf689e55b00b51a343 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:715db4409f031c63bd7f6eb03ca9d04248013285ce34bf2ea6bd3b2020d75a48 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:b3cd66ec13f1816d27dc0061b87b61bc86568b2be382a9cc51c6caf5de1194b7 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:fc180f5e0e75ac7b22b7dfb43c6658cf4217d4dbf086bfb00e592aaed5ae6777 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:de67955c633c0e64fc9f16ced95e92b7260614718da197d8cd7162218bb5fb71 |