Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.13.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.13-cuda12.6-cudnn9-debian-dev, 2.13-cuda12.6-cudnn9-debian13-dev, 2.13-cuda12.6-cudnn9-dev, 2.13.0-cuda12.6-cudnn9-debian-dev, 2.13.0-cuda12.6-cudnn9-debian13-dev, 2.13.0-cuda12.6-cudnn9-dev

Index digest:

sha256:080c16e4322f87daa06e14ebdd77905dc1b9930d8e70d08cbf1daa1cef2a3a83

Manifest digest:

sha256:aec7a9885da52567d304299f0ec5e2a52bcedce43553a2eacbf17089ef85a21d

Size

4.47 GB

Last pushed

14 hours ago

Vulnerabilities

0
1
7
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:35d5909217b68723bf4795a8ed6e1eaa906f02ac3bec67e86513e10eec52adf5
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:70a3f82fa8e3d8400b8bd4836931bfb8ad7e131c5f865c1053e61ffa8f619612
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:1f820c7c515aea3d1b909b4ea699524becfb71d6daad857e1e1e43655ce6482f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:7653da93892a45c6dad3bd15f2857b106c36437323ae605c6fbc6155d07840db
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:26c2602aa88b4f341e1b434d9caaef562d645fdb482a859fd8b340f2b52c4bc2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:0aa73e6aa4f83b85b6e63ad6e26fa99e4cb8e68ea565009c28f3d66ee9a23acb
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:d810727882d3a9876508aee23d58313622605984066f0aa1ac2dd5cba57c4ea4
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:8919039e7e133a55040529c821810553c554f8c5fe20d2e72d46bb16c99e0ace
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:6a357525a1760b9e69f660044618f14daa8ffd332adaef4351c548935e0c3fb0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:091f1dac8593c7e69f688bd6d820dd54d4885edf1fe1622830bd02a02ffacf86
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:d86c67923570519a9f94aed38d05d9664464a04db04e9fcb4e7106a7b473204a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:66a79b4621f2524ecacdf46c4465156016150bdb3d2052c4cbcd3770d3abb003
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:88ab06e1657b78c0026ce26810d664c9fc7dfad820f53be37e975ffdb03877fc
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:52d5e4e7be420ceb805ceb952dda368cc666b77a4de228c3e7846ab8c79a0522
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:5b73949a526ce1428d4b3adf5b5e5fe5baae3b46f42a80d81a75a29a9642b06a