Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:42f8afdef985509589775584c716b09fa67b07be3b4c760ae627d13c5adc1430

Manifest digest:

sha256:bed2c713db47977d4bef2844cdbacb4e2d820e53a18a9ff008efd12ae290820e

Size

3.59 GB

Last pushed

1 hour ago

Vulnerabilities

0
0
4
5
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:32d8b1499237491b3b1e11331b084740073110088a56ea01eafb53c8ecc72015
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:1ba8ce8d2f3d1e4961a8f72a1d3572dd41f749ce41b845187e8e820ec0ea118c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:585d10dd3a0c5299f3b2ae59d03c9e20115266db5ffe7a853f57791bbbd0c775
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:557c20995f4bde22bd6c4edf0728764b2a597e57e56ab43a5dd8f21cd94dfb74
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:30b3adc6049b9cca5773623d0f15f7dbb5f890aef1e4a7875e06289cf4aa7218
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:4ed5758ab919963a062216c05f0d2de091162f7bafec34d14d3078ade50a3d8b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:3ab69f3d01e4dd6c61f977d6e39280ec66a10b796e113a04476299e0467d9443
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:8085c1fc33547a273f77e10ac895851364d226ff9e39a87d0d937f5b5fb660aa
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:545a56da4ef626acffc452673781236b4355a38df3b4387acd9314aff6c90362
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:da5e412984ffe3cfe98558587a237cf61a9366b859c0f88570a4183aca0f8196
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:f813b057a437619139221c23ddd6e371c3f5795ae795f4e601acff840d8939b6
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:44b44ebb41dea2bfd750dba98a280a96989ef96f8d19fbfcd101ca4a03af3bc2
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:2f5b1ad4dede66cb25f475dbe432d80bfd79f1f2056392070c7ba5fba0516ae4
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:530b473667cd2cd9a8d5659cddffb4a27e2801d5a62e9081cda8122da997d956
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:a79c0d106339344f2a0741c6d34cc9f74239a5eb299d1015cbdbc751777b8e99