dhi.io/virt-controller
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:5b53ea3fd106a782b42f36d863a73faee6a5c3a06009c47c469261853dfca638
Manifest digest:sha256:9d3cb6077617aa4c338b1ad95b111e9f9ef87f008ad314f552e634ab26a6edd0
Size
57.46 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:9c902db804556fd392434fb6645d0ade6a0dfab1da21a7ee58abf26fa5615061 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:0a0bb32f3da50fc8796e11a0757e37bcb1db3e12354f5496ab8b9ab972a0883d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:d6aa2e4728b0398c87a26639653616ac8a735e0f8804555716332418ea0eb0c4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:a9da7777efa070c475090af6de673bd55d8d2e6276d7612e31b886ffc3d95a76 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:073fe8c879909b59a3496391daf06e3e4e6624a5d540d48722eb8af95b92a187 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:7b4857fee9aba3c17dff41a7887709ae6de1416ca7308b234e22517b4fcc95be |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:dd43b66d6281721aabb68ea283383f40aa7780c143f450b6a287bf0eaedfa68c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:c5de4fb553ba2b0969f04e0892189f58a4b897db72042b08ddf9ffb13693fe6e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:c0aac75d3a5a58759e61689f66f29b6d774d0acd86bfe6699d55b3f211f1904d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:9476c6a72cb24f7f3a88611def47ab7cf78d54d67f694a625a1e6d1f81cb5756 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:3e3b12827bb622a9c3e6d273590fc6d0f30407edf8109836bee04f4bb6fff6d8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:f514d014d435e73657f48ea1dc5c1343f21419231ad86fa2ea05bf3f29c98711 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:f4d7459085341876f41d522e979b2486b8c3374158dcede188da05bc0d78328c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:8188c7d06ca25728e1dd71c8d6cfeb84ec0f5f92b006152e9829738803655562 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:c42b4b01cf9cb128cf9bd4be87c8c1f2f06520b520bfd45205769af571343e17 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:bf5a39f4ce767a491332a82a05ed010ef73448f54be8783d7c980b04531b9089 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:11f7eebd85a6bc6af91c37d41501a9ce6b1c5d055a502e5321a499f06fe521e3 |