Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:1a90f13da702af950df3a65e81d0c2ce87492a14a315f2b6ddadd1d8df94d085

Manifest digest:

sha256:b97ac8c3e198de48b2d48a72ca7dd64ad6c4f0ef6bfc570cefb6d3e02cbfc85f

Size

3.59 GB

Last pushed

14 hours ago

Vulnerabilities

4
25
17
4
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:0d99d11f1a8b8130072470bf9601c5700571b550abd7230247fded0dbc7031bc
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:8ed73658f2b9a7434efa963765ea6ae2c46ff73cf5bbc942c8695a3477b75426
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:782c544ee7be92a9c1b8a05f956bdcb4c0e36c58b3162c70315cc9a8435d3107
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:6915ae392ac942de9b50495bfbf6d058885a293cc8a27ef27a21cff96bda4c5d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:6465bb469891da5b0de71d121058659dad1f5d5f0bb69b04b6d1791c6e964b7f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:e5c44e224215164e2de6caefbbb22348484e19658fbdc73cd1ab94e045856fca
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:c1ae4895fddcde2140857a5aecc113705ba658bd8cfa9fc376c0e809a844b364
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:f85bc1d33b9f0ea83dc80ddba189da0d681dfc8fff69cfcf9cdc1bddce347469
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:606bb22c362dbe4f0269000b83672d8f7ccb3324d08316bbbd83af4386d76a80
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:7c5fdc10ad9978ef1475031f86ba1ea5b636b7ad6b16d38f20bfde60ad25344c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:7d0e367b4ed04e7cd6b38840fd7880bfcdbcf1fc252de3c68cb42df103a317ed
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:27cbc0819b34b506c1e24d66303eb049ac9cb024a0a0685acf6cbadc06394cee
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:de4e3dea91cddd42a24abda6b8a942986107a27ab60db5294def4a2c27f95c50
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:2ee818868be5e10b3dc1e449408b08322abffa3bb293c9daec7f076bc3fb64d7
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:2563697f9cf4152d60e1d4fe5a1c411de3f30ad5a1c63f650b52d5c1a944da8a