dhi.io/virt-controller
1-debian-fips, 1-debian13-fips, 1-fips, 1.9-debian-fips, 1.9-debian13-fips, 1.9-fips, 1.9.1-debian-fips, 1.9.1-debian13-fips, 1.9.1-fips
sha256:d9c040f5223fd76740bc378fcaecf5e6940d34bb4b21e2ac26f4a03a5f44e9d5
Manifest digest:sha256:1fd12a77ff23b9df2b1e0c69fa945d08cbb878a787460358b1c7065a1bf4e17d
Size
25.22 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:cdde2829c291d27f26fa90424587bc4d7152af2c65363f619cabc09ca4de75ed |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:0bdfb328437a642de3738922ff6e63805b4f5dff4b966bbc34588417b5b1058f |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:24809c3f397334f4fa593801f4dbc09764d0b2a034012f69cecabfc5eb6dad64 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:7603135388cb43f010c945d85a1950e67706160bd1b6d7ab5ea869ea5ee22f84 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:7b3ad9f4ca303ea141241f3113f93ec77213861ad3363b16a93d6f5197ffb538 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:1c1b63c3bf8962ceca16aa3282f9d39813325168d99af89d44fb0d31de6e992a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:5f0532cd2a95ead4bb0bf9a3f313487132f9e2907775c1613166bb0c5aa660ea |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:d96fb9c5da3f18018920d188d02431a7effa1cb23edb1ad80e55bc94984a855b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:b6bd4c99d1269cb562b71a85b4fa178e5e70c25d6f0112ae661e28cb81cb3fe9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:c125e8033933fcee32f7f04de22381ce3ebb9c1a981274ff00d80b92ceeb7c97 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:48b9dc5bdd85215f1688fbe421d4b025a0bcba966caa255bb9e35ef04d63c530 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:267e94570847fd7036ec84e7cbfd6922856b1ee48ec41b83a993cfe29dab855d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:35ac0eb739e980cefcb887ce67df2315bc8866fa0b8d35c34cf8a3f0d0a3a4c2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:909bbadd0c9ef756a712dce2235bf269f022cf0c74ec5fc5f29460e279889665 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:2318546043eb1852e7cffd941f4cc9f8e3a9f0785934c6828c9239398349aacf |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:6250fde3a21d641d629696ec7ab73e19f466d0434ada0c805037cdb86aff9493 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:a47508f82726b7c1a782f2cf48344ad096b48634c31e77d334a5201221323601 |