Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda12.8-cudnn9-debian-dev, 2.11-cuda12.8-cudnn9-debian13-dev, 2.11-cuda12.8-cudnn9-dev, 2.11.0-cuda12.8-cudnn9-debian-dev, 2.11.0-cuda12.8-cudnn9-debian13-dev, 2.11.0-cuda12.8-cudnn9-dev

Index digest:

sha256:23a27c4fa585d29fd37d530cd56b1b3f1a70b3bb180bfff631c43193fe01a595

Manifest digest:

sha256:bed2928fb25230a7fdf37e642930f6f42477e99ed2c39956f3914990dfc21dcf

Size

5.50 GB

Last pushed

14 hours ago

Vulnerabilities

0
8
14
37
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda12.8-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda12.8-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:85b8e99d256aaf5bd0c2840728fe2f4070958dd1eb1edc2784bbf87c8bf4943f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:5c324ad98fe402a1346741fa0485265e08e326f0b73aa01744a9d2f5a05240eb
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:bed2a0319cebcc5a6a6a99ce9e6caeb5b3269257304f40113f8d165266941956
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:8d0fd0ae99e8577ccad1091c14252133f894f57006faed4bafc6f6cdc854aa80
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:c19b4f7f72897d242f0af73b9ceb4269a3ad112fc0f8825074578a1128209926
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:1ff06cc2d4b844ee94c2e3516b50bccae5812c7f1927abf3010b34076bbed49b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:81e9f352a765906c2f0f97c22803344c6a73f3973269eb01e888635c5bedba41
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:abb3f8307a02b125a3315959ea27afb0e55026c8d3c9c77c8ca46377d0f00a29
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:bddc11e26c9af1098c3d75cc1f712e4b4c18a4ce3768b7ccfe2fee630893ff98
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:e1ced15cf82f1f428f78d57b921496e67b55e3190aab0a9a2023304ef4e9fce8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:8b49e5bb4e508b6845f1b4c1b4c3ad753b81f98704f26cfb7276929997c056be
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:c502f10628b310e8b7c58dffcabe4fcba8044f78cd5ac09b0a0e1667c8a76724
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:3beb2a88c287e3dcbdc595078c052d0eaa53813c376a83b1c150b8fb246a1d6d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:debac02ea88d0683da0c8609f117b14d71624397ee590dca7faeb08a6b91fada
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:5d9bae502db1c6dc5b6c99c16df56ed3353923d5f8f06183a731f1f40585760e