Sign inSign up
Ollama

dhi.io/ollama

Ollama 0.x (cuda)

CIS
linux/amd64
debian 13
Tags:

0-cuda, 0-debian-cuda, 0-debian13-cuda, 0.40-cuda, 0.40-debian-cuda, 0.40-debian13-cuda, 0.40.13-cuda, 0.40.13-debian-cuda, 0.40.13-debian13-cuda

Index digest:

sha256:25047db279f059d87c62607f351e7f2d4dec77c581adad34556b4ee13f4ffb7a

Manifest digest:

sha256:5b0a466f4017cd7b2d79b1a4653854476f5b5dfdb6d48c5552adfaf44223fe9d

Size

788.63 MB

Last pushed

3 days ago

Vulnerabilities

0
0
0
0
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/ollama:0-cuda

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/ollama:0-cuda --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/ollama@sha256:deb487323cad8edf5a452e803603a729bfb19e19cfb3aefce26d0a77881613be
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/ollama@sha256:2a9da87e39466c4a9e9d13a7123e712639ceafe34f9d224bdeb467f9d81aaf30
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/ollama@sha256:3fddb7955cbf20130c0494a53f7ba4e6a5d72dede8fe6d9c8f9aee1a275e1380
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/ollama@sha256:2ddfc70be2a8f98489ca0b32c7fe11ca6ee748d0d982e7a535a9b25781c11e20
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/ollama@sha256:d157f60a55a7e24eec5c288dc2927e1b786e5b7d4fb7f67bb4a7be0998536c46
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/ollama@sha256:0852f2fdd8d8e383bad1df43f2848d85f6d83bf0900ba12639f1f647122b90eb
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/ollama@sha256:3f356ad4c86296e7945c9960cc8b12d507a27bb22ba3809022fec3acb7ff0c3c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/ollama@sha256:43fd83f0a342b63c406787058d57a1c3c8ec5e003ba5079717b9600ada0927b3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/ollama@sha256:99533b4ef70e9c6ba6886b940d5f5a29bdd0b7114a4dff9a3440b4217173a99b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/ollama@sha256:2f088983c72051c4661574b8616e08e27e94ffc87aa6c6c0e23d90061028b645
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/ollama@sha256:b53185c9ad674bf9b20688cc841c051f267ae9d5dd22e787408d6d3a7188ea12
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/ollama@sha256:14a5fda996f40d5ea0f0beffce4c5b67324e580c44ab200e076c75751ca7cf22
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/ollama@sha256:7ff22e0f8e7bc35f6bdb0b2059e7786588bcb771ae1730c3df5c3bcffbfbe108
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/ollama@sha256:f5ead9015e818469f5baa34fa0bfbc0321a847f5474e1dd4a3160b0440deb88f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/ollama@sha256:5f17379cccefec5a7328013d6e74c745c779e63c0ab8d7b03626cab26c5d1ce1