dhi.io/virt-controller
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:70db20dea0964f3fa46ca741792d2e090ae497881c7114d0b99ea03526049a88
Manifest digest:sha256:35ff2b18e3ecc8d29f9b5c0ae83e53075026123e4ffa5a25408d0ece530da75f
Size
57.47 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:eec5717d41e9c237b9d915ca02f2b772d9c92592aeb791a8ae08e9de58c1a232 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:4f095f357f0d56eb2e86d38562b300cda54c857dd105588c5ae03e071a911d17 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:8fed0302397c56bec8a9df6df3a425bcd71048d34297a614225d5c09f95fc5da |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:da33525238d4be4fbf9322412594227d9d7bd94ceca68e59d9d4061a96c1ca97 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:419900c7d6bbe0dcc47a678199dd7260de50091f3229848f4a8ee2b5cb63ca01 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:0016bb14b292299ebd17b4ff21103c2b2fec610d3ec5ff2ba29dc96f401e24ef |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:1f912ff0ade3b1027d77a0ddafa6e05c3db228c6283b9400deaead0c14a99e28 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:a810880f3a818e73587961008744a9ac7d955b0764f1ab5ececef7c0809044c9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:fe93e993f5bf07cd2d424bf1761c666046f054fa14bc5f9ab2876b999693284c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:0af5e1cd1a439e621762a668390ee1d54370a6be18c94a986f9b104e76b09051 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:9ab829e9d190a107998b1205aa50fd5c04450b68a1180c2080012681b728aa53 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:2fa83b688502367b48ed04a90662715d608e406d587541d35f4c107cc1b1466b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:394122fcde3f14eab5598fe3dea20495d83bf5239b68e41ba7e120568552d237 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:3581ad9dc7e3e0aae3d4df2190e3de9ede1497289aa730e9edb89a1a87547ced |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:49ed3b9cfe6a93d353f3ebb75bfeb2db8e6fe85be7b4850137aadb79c4cf7935 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:f05ede30a1cb3070102798530c20ec2daa8ba138e34b60064e81a2d77beef0a7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:d4ad653a7692a4fdf4fb87cd9186c91bf486926ca7b3e0fa0a7302b9dd153e79 |