dhi.io/virt-controller
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.9-debian-fips-dev, 1.9-debian13-fips-dev, 1.9-fips-dev, 1.9.1-debian-fips-dev, 1.9.1-debian13-fips-dev, 1.9.1-fips-dev
sha256:0556a34023bf3cd7478a6cc2c4585bfecd1437b702bd8e19c3bc173d9320d11e
Manifest digest:sha256:c962d85691fc150c010268dccb7a76df8e8fb3c1bdc6ccf999c1d798ee24b9e8
Size
57.64 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:824cdfe3660abf4820c05805ec81d51ce3dbb7d6f02eb302492f03bb2fa0674d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:846cf681d8054b524438df053da6a4ced936ae5e16c2eba432e9c7cdda165108 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:de52995be69345b42112da8153574d17057a5b9ef2d02326c75648bdaffa4e27 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:245daf611a5c0f3d05eb6e579717facc486bc3b25aebc22f48d309aae9d09097 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:61681fbdef9f05b04d571020a219e6915a8b130f3d78b247345acbecd294e166 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:28e920f760e400d9f3bcc2ac06bab86062a7b786804e6b48cbc99f3ffe68a865 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:9241d7e47c94457b7be386b6e65e490319fc67a35cbfb5ae3980c02f357c31fc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:78acd72f10d8ef0afdd84fe2b7d3e360640c8cbcbff33763102f33f195e5324b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:1386db757f5441677794c2dc2f086c4b9e8936302cf2180cef11f9ad50f236ff |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:488eaf6baf989c0e567a08f6bab052f25d98cbe139ef5d718a985071a67080e8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:8acdfa8217f439fc49ec2156e1c433c6760663c3823a8edf81368ffb19c8e583 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:b9692f76a19d74711106fab7bcbe4acf7d3c3b86a7d8d6f764e1a6bd04defe6c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:85ba22f6f985c0b1114eb5c4988ed0de5a1903ed5d8225d761c71c8ce2c3beb2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:8957a7b543cd2d82cbb6c409581a863e9665899a46d66cd31775912d1488e788 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:2a734e2fc7c2ad2c2b2166d75b749db1c24cf7e2ced822ebf3c7c36f472f8f29 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:7599eb6ce293d28d5c0df0b48065b4291f1e8c1131ab2406157d8e7943c77647 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:1a07a897fcb080a63c15c34ff36a28df03ca9a2ab2729f27f36dcfa0316f7196 |