Sign inSign up
Virt Operator

dhi.io/virt-operator

Virt Operator 1.9.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.9-debian-fips-dev, 1.9-debian13-fips-dev, 1.9-fips-dev, 1.9.1-debian-fips-dev, 1.9.1-debian13-fips-dev, 1.9.1-fips-dev

Index digest:

sha256:3d1709ea78a5c2d4ad3230d8cac46918b46faf30cc1b1549f6d53cf2a56b9901

Manifest digest:

sha256:35ce5f7d36b2c4d9768c1d7701a2880bb97cc6979bc0b973f42d1e732b5d5e1d

Size

57.75 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-operator:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-operator:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-operator@sha256:a9dc2d6dc69e851e9e1ec11788e9f1247960a4a4f6cc08297d65e71a8e05fe0d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-operator@sha256:0c868f25cb4c8b1c7bb5d57ed3cd8ccdff4c734f9ed3ec90910085515dc27797
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-operator@sha256:e57096d0130f71808b4e9cc32d79ffb02b5c5461c151c5e3a0fd843eb3294aec
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-operator@sha256:827221b2a52d84dff1df709f4ef9a44f80765731e4133b0b60939720e59289ed
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-operator@sha256:49ed5bff7a6bb62c49d6311765b1cb8b836960a6e006240e69da7f0fbe469e2f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-operator@sha256:f45b339ce8325c40a8324b88a6d6d45725cd7f49f5dbe0949cd4d217991cbed3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-operator@sha256:b13a1a8abbbc9aff7f7bd115ae6ddc14c93bd7d3bb8abcd02aaa05dd0837a9b1
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-operator@sha256:5e46cdb7c175b08a4290489d3d3f9029d8eaab52c879e8c52e6ebbb30f2b11b7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-operator@sha256:7db64a646a531f0baadf7bec8bb1bdb14b25fdb9ea1afc2c9bbb952c94898e31
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-operator@sha256:38937de40ad54ac00b6b2b6920aecaafb10389cdbf3df4117b0b5a850192fc57
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-operator@sha256:732eaca38bc528f187e81b9e857dedfe684ea1746142a5dec7b22ae5787d34a3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-operator@sha256:341a78e2f5c805d92a3f7dd9f703437e18a4875d1860d3b06824a273ee9741f9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-operator@sha256:c15a321b9d44e5b0bc6b3c22e18608dd00d3c477d156f3ecc6187a7f4faf3842
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-operator@sha256:81e2217e866592a30b943a45626423e60e611ce7eabbd4468d73337dfbdeac3b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-operator@sha256:49e630408330f0104a5d7a8041978d325432fe39963272065304f5c8c71a6ef7
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-operator@sha256:d9702f28f67bf82ff213db65049e825f0a9af8b59706a788e8878fa93dcfac26
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-operator@sha256:abc78d74e4152ecf90aaeaf1cfbd9cde49243044c7005b19e8e94c64e0c47303