Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.13.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.13-cuda12.6-cudnn9-debian-dev, 2.13-cuda12.6-cudnn9-debian13-dev, 2.13-cuda12.6-cudnn9-dev, 2.13.0-cuda12.6-cudnn9-debian-dev, 2.13.0-cuda12.6-cudnn9-debian13-dev, 2.13.0-cuda12.6-cudnn9-dev

Index digest:

sha256:6a2352b0eb577e5b849dcb6447667486903e6338574f9d3e5f7ea642137ac313

Manifest digest:

sha256:b4816d7cc1cb2f29d8226ff38fe12b9e674b74cdf9ac35935ff784179a1bcb67

Size

4.47 GB

Last pushed

5 hours ago

Vulnerabilities

0
0
5
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.13-cuda12.6-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:487d0d58f438ae989acd9535b40ab2f1dde47de22a2716cd76204c10ad0bf4c6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:4a74d6b427f3efd649eb907cd4195bffcec86b9a2f81fba41cf080540efef2e2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:2264238055f3d953c40900869d175947a130b0e3576b8d98e86704ec91f479ee
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:5b5a1bd2dde9ba660d51812b37127bd61f9f4936d113d40b42d9ec59bcb8025e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:23ac42994650005c79e3babfc5da83183709eea7f969cb31adb8b6c76c33d4dc
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:7fb549b81cc9e99d85a92ad26f86a83568950df26b0d58cd41ce3a250c6ebdb7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:ab75e47692e8ea094b9d3e712a2d2d494bfeec3f0088146aa7623c03afa2aa1e
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:a5e05efb2e4e66056ca0c0002cbd5086d8b7a8142cbbd6bfe101d21f349d71cf
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:10d9990c2e5f959cb6c3eb391d17b4c221e3751426cc2251f105c8b8392bba81
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:ae4074c5653c772fdb40d3b00e1bbb14546dbe7225d0561eed4f0f41509c0c6e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:d6028e46d2c4e855c7f64075cde0c1c26e37fe78644e891814ce1331f59a3090
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:33fefc465e214829e7390b65cd503d0abeeedc902cebb73243a1f9270343f5f8
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:4d5040b390dbf721b59771d1c4878025a3794c4721baadfaa3a8bacb2d7263d4
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:fb66d6ae3891fbab8705640518e6d3d076ee83d3a7cf172fae33ee46a3bb3f87
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:60c5dfec07f653441c43a0b739d656c56ec5731adf5831de3355f987bfedb533