Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.13.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.13-cuda12.6-cudnn9-debian-dev, 2.13-cuda12.6-cudnn9-debian13-dev, 2.13-cuda12.6-cudnn9-dev, 2.13.0-cuda12.6-cudnn9-debian-dev, 2.13.0-cuda12.6-cudnn9-debian13-dev, 2.13.0-cuda12.6-cudnn9-dev

Index digest:

sha256:7d08eb1e951c9409e5adb2eb30ab9679a7ffdaf4b4e0f8c1b6612ac8fbe3812c

Manifest digest:

sha256:05324c3b4c1d74ac2b41461af691dae75b2fcda587d89f6f9b824434d5f620ff

Size

4.47 GB

Last pushed

11 hours ago

Vulnerabilities

0
1
5
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:f688af36b7413544c770276b6a2d1a3fd24b2211b7620539e0bef67044e8d722
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:73186066079d6609adfd938b159dba2b09a5b93a02744e107b4901540fece28e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:69b3b99fe66e7c1473ea745b1f8098b03c797cb36759db44ab87707811e7872d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:cba2a410ec5923121665392ea6ccfda7b70755b3ff7b4e8b396e2bbbe8da0175
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:d3072bf94740c785c9d798dbd2824fb865444b3974d4e7f5fe9569f5b7b55782
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:d7751018d20f3d28e9b1f235565a9dc04f74f62a17cbecfcd4c2dbdc1c65e0d4
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:ebef5e8a528c3219d91c3e2f9619887e9074d1a557bf27ed166a081880e0e041
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:032c5a49e514ea7a8842264a77b1ef59a60322a391e1fdc7dcbdb545f691fa05
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:9cbdc7a80f99b235ac85b83c83fd190ff2f1c17d5a0def87c19fb25da117aac0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:3a2f71ca5ad680112da34f87eecb006e9237890b06375ed9d21d17850e3b08be
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:ddee1829928d9b2fa724a06abf4ced33bdc2c5a6b0a372023958ed38b73871c6
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:01113869f6ad5a9caa43063e3ae3d0a786c3ff503be00a4491d1aba4fe00f0aa
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:4aaa5368a48a0fe4ab750dc6afd8f86554a4eb0e44236435d5ba23d0a3ade8d5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:5c801d8cfc24321d4e09959e225e60c6a1d811c13a5f52447e8291f395c3a9f0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:e59919f2f7b9e8bb5a23d7817946212ec7b0c2199f1c4be66a5c8ac8fcfa5787