Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda12.8-cudnn9-debian-dev, 2.11-cuda12.8-cudnn9-debian13-dev, 2.11-cuda12.8-cudnn9-dev, 2.11.0-cuda12.8-cudnn9-debian-dev, 2.11.0-cuda12.8-cudnn9-debian13-dev, 2.11.0-cuda12.8-cudnn9-dev

Index digest:

sha256:6313c1fabccb03f551c64fe9fcae219ba804120a2c7ea83c686f9746f1eee124

Manifest digest:

sha256:79a13aae3ef89c6309dce4f20f9b55c7c8bc7abe833fc9eccd099e4a2339b5b6

Size

5.50 GB

Last pushed

1 hour ago

Vulnerabilities

0
1
6
5
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda12.8-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda12.8-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:98308b31699b5e5d978a68038cf59594d7928c8fa002ccba1fc44bd93c815426
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:02f7609b81587530aeeb15e2decaafeabfde641c602e4f13c5e60e6acb872478
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:5bb2b02b7fd22ac5e2764ef5961a151834d7f8b4cf6b434b9d94c782455045da
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:41cfd75ee64dba104c8f0522b756af93f0de3564ed2c80e51ca41968a3a30013
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:150390e1c6d1ccc392cdaf6d8e5d263e3412eaaecf21ce9ec3a38a4342c85abb
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:4c4a04c3e511ded760ab34f95c464dc0565cbfbf9d6a77b16a1925048ca4c547
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:332765808f4b951ad37ba9cf7b4573298223666423623cf4c9e63d5105aca518
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:8ecbd170ca4929112c9b6d8b23035dd2fbbc58c04094115cf75c6a1f6a6960f8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:f992c06ab9a5574ab883e836045c202ab2a1a75298212cf76ab47c83c299e0ab
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:012f3c076ff98b2eb39842ea7e2a8b31b2a4483dde4199b900d4e8d4b8132bf4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:6814c36df276fdcc70a88b260fe015833188b5836e0cd40813516924c81b219a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:928f2451b5ff5962d0040f01c9459cde1dc3e5c2d1d69f12c6a0d1b66d4b8786
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:e438134e0621b5c4db663052e9a333f2680efa5e4e41facbf133cb15f896e2b4
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:087fdefa01a5d1b56572c70f2f60aff39a3689045b265392df4925b7663e51b5
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:adb6993b502f72f29edadb69b446fb72c378d0ce2eb158532ff152cf3aac0cef