dhi.io/virt-exportserver
1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev
sha256:24f5aef208fb25fd1d64018f71aa264c338580636b4a1aafafd39a5ea8ae103e
Manifest digest:sha256:97f43616eae6f8781a93c2c767c15925710f86fe9dd1d2a0008938e8193bf36c
Size
48.97 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.7-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:9ab08a53dc5b659b96c646c936fa3ad297a3d1285eb7ac845f46bb272460549b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:1fb6ffb5d437d138cb41bdbb23e1b616c7b5749138427c3c074a107ed6fcb95d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:3a4239eb66900a718848ddc6e1be480c7dccc999e3201c9106a0c0ed4348e3d1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:b28f1b5f98653178915ff7709f7f329ecb3fb6e8db4e880595aba8cd9da94547 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:778c1fe325e57b2164c9f66930ca5babf31fda748f90d9f0e2aa3ece288a65fd |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:d44c97b4f5b2e5bf8e78788e51f37e80e251fe778a5841bab166e97d9ff81ed0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:c2925e817f5a32561c167234869c9f6b56ded3fbac7934a6c3139e3db4173047 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:21d0bb7e53fd65722868973dafb56344f3798910e6f8c204e7a2459375d219b4 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:5fd6089e522ff9cc16baec16ba4d1eb211d02672b69e67b1d8d56c868214ccaa |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:b9cdcee9fc525c1e9025a7d4a6e458bacdc109ed461bd723648cf38aacc9809a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:3b9ad939a80b58beca967bc027f9b9a68b1218957c5fd68ba0012f96674a88b5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:53f700601c9032934337ba4e106e8458782a4bad43f3e77f86dfaacc6dbdb38c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:48f77cd296fc7ac2d25ca5f38eb51748a0ccfd4f9da0d626ccb56b152e337969 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:2f196a079892ab60a19a65092efe5993cf65e84d60ac7ac105fdde41a6fc6cb6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:7158c1841c7eeee29f8468735eac04da17839caf47e38611319ab23fc171dcf2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:b8fccb17446a328250324b8d45923e8dafafa801fc25a759ee3d814bf9cde080 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:ac9cda594385f64932a377f3dc0819e8abdb69e3e8d8b77a18ced3ce0db7412d |