dhi.io/virt-controller
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:8248b9944694ad48ecfea691b6b2d2189d98ee7b1f43ec7527eb05a164cc86d8
Manifest digest:sha256:ca614c4512a81258ddd994ef62e88dfe01385dc2b1595560ab5e582a145a5723
Size
57.46 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:ad03817a3a3b1224e00a32f3dad67072246387af34536485523d91f65105c26b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:23e064af672de3e5aa20e59cff441ae4a694c15163443a50b88569572c139a1e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:32ed2f4cef74fc8633a1969a7b9f46b18bb7259c0e4fbc5024e805b4095f41e2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:21e233d2afa4b5ee973457c99cdd9a1b09a209455574b52e391639e9706547dd |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:6ab1bfd117daa322e369e9a139d80a66c044c06d137b3ad549595f7231015b39 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:820a8a6eaa5b3483a22249f675d2031f5dcd2291e55f1d0fbe25f044c0fec431 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:e749affde45724ca37756bcdf172353b4208f74ec8964204acb2f64427cb7042 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:320d92b3dc7f1b6ef50990871d3901cec8239b08f5e34a83ebb156b7e7325648 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:2724e954ddd965597d63b7daf2998102f6b52b8f098af810f0bd58d4e52e938c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:ff52feac9943f61c1aa2426c82b98a12ada4fe0c125c18818a9438ce58c4eed8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:3d65534b38689f07ed61e642553703178a84c77887b790dbc8f37c7b6a49f931 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:a0e997f0ba5348bffae7b0c0485f2207a820ea8e01fe95c1eac2954ed0c0664d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:49e711ca7e5cf8d4874f695fb7e527a9a527ef6e9b6f91fda87cb3dadd2e2431 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:74951276b592272905ad515ea8d57b815a81ae7830885134f06e9b7da3c367a3 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:b3a55eaf6ca7582f240f32044371e5632069ec1885392bd081f5e9cd75925f8d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:a76bd08e6db1bc0abab46b4f2a352255a9176222fa53d74357ab9e2b96d935bf |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:b82d5653dd8e61101fa7cc35ddc8841c845bc5705983cb565bf2db696acdc263 |