dhi.io/virt-controller
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.9-debian-fips-dev, 1.9-debian13-fips-dev, 1.9-fips-dev, 1.9.1-debian-fips-dev, 1.9.1-debian13-fips-dev, 1.9.1-fips-dev
sha256:a073bdd69a856000f9ea240e47de13eb377c9a42e4ea1e89485d2ad199d5d648
Manifest digest:sha256:b8a39c24c635042bd90e2a1ad3055fb0838acd0d0a17a611b196e20a33d82b8e
Size
57.63 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:fb98c6f88bb3bdedb69e6355d8087a25a6d1dc7bb57a928f21ec2716c4aee4e5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:54bce64a8a5a04c74a5034b9c0db7a16385b292023a5247e9ecd134b09929d4f |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:06a70c784bd23b0a385cc6c5d6e7cc3730ea584321083f5c3828fe8da5134bf6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:387d6513f16189db9b840e405e77374288989f4eead3f92103697009c8e90b48 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:fb7838cc8572d160230f7ab1782f188d1b108d59d59e215ef44bc43b31ba25fa |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:80592e33c981e4660fbf7ac57e4a4a166ec1de14304c46528c4059ec843990c2 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:a3c60b039c8f7306cd5f1b20476f9ae96c4027d499a990cd8470f144a880fbfa |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:36e839d5a08ec1eeb96ce4d19014e3b831c3b4fdc6b5d324631a79e904fd15a3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:78fa268fad6139a2a01f50ae4c535c0f8fedb57191c952bdf266b72deaa20a20 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:bf7de6a215d5dcf3e2cfaca2d507a1218ea53dac96173a2b3a961a2e7240bd25 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:307637a078241ba5d78a274ce7e01e771a425e628059edcf7f28e9629937b783 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:107c8af33cfa5a7664cac16e9985b80dae4947e48eab5bcdaeddaca235d18fb0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:bcb142cac0d7bea8be2f1064e2c2f795ce57aad5d146fab0267a459df36132b8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:7632b3f8506a66425746ffed77254cfdcafa3b05073e982020897b37dbdc09e1 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:a6696d011547b5c8615474d7db8875ecc46041baa9794ab484e831a6a2bd4953 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:c728cde6e2bf26f36bb39075dc041ffa9373302b7bb4fe25948e2957106eb4b8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:59fbf47d4ff867fbcc0b8c5741bfb34ceeafae314db60da2dd9c18b9db076125 |