Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:a4d65b2686ea80dbba247470c8a24c654ccd8e63f1d9904c7fbf36357e9a5118

Manifest digest:

sha256:5aed7e13cc53efde64ffd399a0acc52ccc8f9541c72f66bab15d915549a2ec97

Size

3.59 GB

Last pushed

34 minutes ago

Vulnerabilities

0
0
5
6
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:c8c5241a6a88bc0f82fafb1ab98b988b2302bdf064b70c82cb73442f6cc50f6e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:495228a2db824fd585c0a35873e9294276b6787f5b437d70d507676f2f67d66b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:6120c0e83ec41b0dbcdad18941731e5aa9231ef420ec6eae18d527bd0f008a05
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:aacd326906c23129be9aeab40c80124e1a8e1ae1d195467ad37ca06c37b9fb41
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:68c67456f5311f8a812fa7d3e2b130a325e5d06aca9eb9b56247ea244a5b1d82
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:7138eb57afc28148006269b53581c901047d37b3c3760f26405a4a2684ac7fcd
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:c43dd66b4c21f5bb4222e5b16d9d577922c8e83ee1e3d94e29d6badf0dde0c1f
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:80a5c01d202611dfb7f734dfd8f741d6d99e288f6471b14a90df5eee16c8d3f9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:57f15aa2115d6f1b47756f575988ebe92594770faf471c455d4b2bdb3ae6fde1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:35f4382395ba14666592dd08a01e8693e02775d17823b79dea9f23b6ba280bba
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:fe6a8a53688362db4d1beb332e0971abbd7179cfe97d7f52663365241d5ef378
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:896f7f5265dde1484d3b2d9fea75becfd3ec48b3e23499a02fa539acc190d0db
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:4c26fefe069a795157abf6d9bcaae0ad19852fdc6b7d9e41328baf39836311bc
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:c7809b3c8eb3f225ece8ca4232c73f83758c759e84b47cec2cb825ff99ade07d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:197591263319a1480b21a3fd87b26f0e7ec25f21c6f7def307d9db99e49c37a8