dhi.io/virt-exportserver
1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev
sha256:a737ba0ad2bec9c5ddd51522d78b38a55de736c87a0db9542a026a4a159a3ca3
Manifest digest:sha256:dc7a6ca7fee0513e7deef855fae4f726f172af4771f549e264144343a49918d2
Size
47.86 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.6-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:5e130efff99fa72e7e7d7b8fb33d1e1102fc7c022e40ffbbe36ba7b63d059f75 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:d0c9077ffd28ba7011c37a981a4b0b9d9aab957d311ca6c2353558539ede3023 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:4cd2dc3e309f7877dafdecbb31e105c43bf505ba2a419db3a3a657c222acac8c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:ab74049294cd42dc8c175ac8c4ba21778cb30a0961eac19fba2d7da4026fcb2e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:eaa2969bd7a009bd7c1e2de40e50b475a93a8a9584e9e3c0650a9af41f5dd3a8 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:ebfb9296751db7335c25a060ebd02d650a7e68e2767d2bebeff0eeeebcdd9765 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:171a1f0a55fbeba6db711d65efa56ee03736aa215a31ddb9ca515c2858ee7131 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:de3629097afe75882386ac23bd29b0d6c0773ccf559e8bc6282d8ea1dfeb4a2d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:f80b384d3273b43740253aafc20b031d413d05f62761bbba21ec71d94e4a272f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:ce696f22ca3251c5027f4a7c7fb09a9743621e0cc20f444d843154d8a480516a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:b4612fdf2583bbe1ee47a3e2b592fde39b850b7643d883f9564dcbe6da9e965d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:7e32ffd8b3a725b46d558b7b6978307cd85c7bba74236b2e080484b62ae368de |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:351a7f76326447ebf23678cb89fb53f414313381f165e4157a2e277340737a6d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:34f920902bf52cec7bcefb6e2b7643cd11d62ff87d7c39dbfad2b5c6a9e11769 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:6ca8d21ded95a662939e724249c5bff058361d06c17b6f932fc9eeae60e12bf7 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:75b005175a36c30afe1590273cf0cf6b908425bcc6c99b605826440db30241d2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:ae858da6f3dcc34310aff986ff00970c7536a321bff4ce2a1ef195805e6958b7 |