Sign inSign up
Virt Controller

dhi.io/virt-controller

Virt Controller 1.7.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev

Index digest:

sha256:86733bc5873b87bb7f43065d70cdcca74bf0b61bb760b534be9e4b4dc0f7e3ed

Manifest digest:

sha256:c49956d9309e4e45b15ab33a86199c62291e21eb2c9738efda5e2398a57b89ba

Size

56.62 MB

Last pushed

7 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-controller:1.7-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-controller:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-controller@sha256:2031ce3680340baca9c1d64aa92ddc3bda0cbfda6c1f993530fe3fd44622fcf9
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-controller@sha256:da89b7b4513eff1fa398e91906e86bca3aef8f1f1207f2f8b52119724ba22fb2
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-controller@sha256:99d0feafb24455d3f2b306c5fe4927489ebf317f169ad9cd59a891e79e479a52
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-controller@sha256:341e63c30edb97be1c2be7dedad10d0d2a83c5178f9efed635384e454d787b52
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-controller@sha256:086bd67e1b5e547c6e547122c80c5e66ee1d410431839e05cbad8f3c801edd7a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-controller@sha256:7dc7034bf81fffa9e5f524d9ee50a1e519bfda1d131a78439809d61343827f4d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-controller@sha256:e8a13d33a9275670babcd9c82e1739c034d4cd3b40ea4d0a3d807733d0753ca9
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-controller@sha256:d4b30b67f4bb3cc5c1749306269f1d48e0569051b807e5cb000879ba26b9a3fe
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-controller@sha256:09c45e5066e5637e9a700991fc0eac244556feb8bd4368c6268381a141648625
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-controller@sha256:2c312d8fd959e44f8e9b364a09a4544b0db897ac1ebfb5205d1286b8f7f2bb75
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-controller@sha256:f3fa42247c6a48ec4f10aec39232bf3f4b5261d901baa09fa0ee1da4ebf7a52d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-controller@sha256:a7ce3a0d3348a7e97a6c2dd30da83797381b0070564ca9355262eae326266e3f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-controller@sha256:5f78b93d87389f3908dc82f9244474310a649f5516eea43d218e04b1b1e86369
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-controller@sha256:e2bf7af07a47b0560e46d7cc2156e07f93986932ea4b13cf4716229d8a90407f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-controller@sha256:475704f7b26b0b79cb44a30a2309be12a303ad7722035d2c22f4b1963f8c2247
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-controller@sha256:0394788f5beef6d121a35bf43dddc9a1a87b547b3150abf0c299a7e796c94230
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-controller@sha256:a8246a7ada38588f9e7bb756455eddc88a0e0d1c7e2bf4a87ceac4fe28e6412e