dhi.io/virt-controller
1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.4-debian-fips-dev, 1.8.4-debian13-fips-dev, 1.8.4-fips-dev
sha256:d040e700ed589f01a1f421a0b58a07f8da2cf805a05e9376b69d59812a6f6860
Manifest digest:sha256:78cd09ff29ebf866a7cc3b0ad17f39912be108cf27c2c715ff098b345a14a68e
Size
57.48 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:017458b5fc9fd9c64bb0b3771c5eeb7f867e890abd0219e04c4bf3c7fa9aa40c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:18031e5419caf7e15ff6e5f525b900acda25bf427594729e3bf26d3770eb0f19 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:536d154c20b4e2d1ef9d109fb2cde1d459aa8bb98b7a6f3569d3fd3ce4152680 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:e852553bcacf5e19490dcc025fd57c5bdaa4b68817fa2e5fd5db4c877027a672 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:57a0b6fabc9d5aca667cfece7419bd2228b72cc1b82d9c8775965367504f0378 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:f7128b73638234ec0ea88de8415185438d63b62f85f482e92a1e6a40c011c975 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:437f9d1c6e213aed1a9a5dc24b6362fb4dce148429efbb3df32c0a2e4d1aa1b0 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:3062508d295f1ade2872529fa0728f613813dcc8a8c30fddb6003592b2c73c1f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:0ecc7a8c910fcba2fc1c6236cca8563676376d8fa8197799682aecae99d2c092 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:9e3b339a5da7b20451ae38ab2aa70cfce4723529bd8ca08fbbada432fb5fc8ec |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:348ec4a32512fc46c2ad3130afa2f3b3548b78e20de43714fbd6157050f14d3a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:e31f07eca5dadfb96b16960dbfa0d1645176326f975acb730d55b131c16b5f93 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:b5c154f3b85aa45fcdeca0d40db7b196e8a5801fb57ba47ab45ae8949addceb2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:6686df00e6539569a12eeb1159879586e7ea5b041f70136b5788469d3bcd07a2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:3daffe73b59c669f171e847985bd6772881abac46101b7fe02d234fb48768835 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:f96a85dba8ccf0ef06f250c086fa63f06284e1adda82ede1b71846b0ed5d690e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:765be9ced852eed5bfd653d1c9c830e268d909ef53b77f4a7f4c3cf5dd7a4ecd |