Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.13.x

CIS
linux/amd64
debian 13
Tags:

2.13-cuda12.6-cudnn9, 2.13-cuda12.6-cudnn9-debian, 2.13-cuda12.6-cudnn9-debian13, 2.13.0-cuda12.6-cudnn9, 2.13.0-cuda12.6-cudnn9-debian, 2.13.0-cuda12.6-cudnn9-debian13

Index digest:

sha256:ce4450ffa5419f4dcfaf29234be4cb93df674943bb3d079a78df44b315eceb1e

Manifest digest:

sha256:dabca2fb47294b90dd2f30094debd72ed31aeea03e65805adf62ecceb815ae6d

Size

2.40 GB

Last pushed

1 hour ago

Vulnerabilities

0
1
7
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.13-cuda12.6-cudnn9

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.13-cuda12.6-cudnn9 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:443b54d13a95fb2b5f35fe5d086199834bc1f6be892d8a5caf155a085ebf67f4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:83f2002a2f33e5d617774487b8b30c0d3d37d3dce4218c742920012e985e7516
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:eada6fa3696e7bbc28d7c3d7c3dfa7d77689bf3fdbdc3aeb445985bc559116de
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:67b3fbf3f813228a7b8efd26011d5501caf145562c97ee7b0a3501c4839482c6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:0ffb9124fa6881f344fb07d8ab7f182beaa631ade05e7305c4b1d51a3500cbf6
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:7fed207229a974d8089f2c659f066c73e4b27eed0f490e245478a8695c0ecff8
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:aa0e6c02a6ea0d89c26687bd06a9a44139a4f75593d1ea1dc3a6591d1110ea3d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:3c96af4e3821d9bea46bf2274d606f055e1f854951d2c0111eadb1b35baa9b24
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:eb71ceac928fead4f02eff3b1d8171f63a1c3740eb48133ed90203c000391eec
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:a36a4ab9b412415da81813b04dbd3af4e54dc40ca6f0720ac76bff53b8323a9e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:5be24ad3369ca81979ba83f0bd0cad5538e291dbebf06bb4c5f77ba24a517fa0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:eb6358e4d2ee558bb2ac5b4038089d1001b0ffdba27d6ce0204350d12b955cad
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:5b3dbbdb91c0fa1045cfa770e9d9d70656a0fa06e31e4f205514fe597181d652
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:a933294096dd7a9ee08ad2aedb6a3213336d7ca975dc5d4fc4a3cf83389ea571
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:6451edb3cd74fc4aa6c449465753abaddb5de2f491907908b3645b826589f585