dhi.io/virt-controller
1-debian-fips, 1-debian13-fips, 1-fips, 1.9-debian-fips, 1.9-debian13-fips, 1.9-fips, 1.9.1-debian-fips, 1.9.1-debian13-fips, 1.9.1-fips
sha256:08c81ab3d9a87b19b7f0f8b8656b35f896e3d9b29e3bb8948bbb6e3d909387bd
Manifest digest:sha256:3f58f561088bb0796ef31231337ab43799957749cc600403df345204644e169d
Size
25.22 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:a188e0d1059452a95b78c0d9472ebd4bff115e0781653e55f92b7d003cea46ad |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:53eecb22acdccc31874500cd4d2bc9bd200c5af7ee31be3b5a2c4bbc43b4aba9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:4fa91b57632ee6af14f139e939eda76cd9db8e8186f2ad64bd9249a7b701f002 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:ba4fb7b0ad4ce4ccc905110cc69abcd2cc6c9f1ab76cdab13d2d805ba70f46a7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:6ffe527fc9e4b15e0af6efc342613d5a35d2a115473575628ad81c1dc263c5d4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:b4e329c1f9ffbfe9013949c1c7a604dc603f0f3913a3b777674c34e2dfcd7662 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:c356d80ab9a696ca416d2b7b49abad0b74bb9dc6353e732a65e28fe10eba1891 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:6efd3c68c1c5cfc3c38d6b616759cf28f51d1d69673e7e030cecce2f31023732 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:84901e572421cf05b398c8530545bc0a4d0190822a85898890c424cbfa0f3382 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:4f1da4f9d3e6a5a49dc9c11be4b71a02cdcf30911e67540bdd37cdeb3eadde54 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:3aa848f7836464b36eb99998351a1258403887ec74ba25be9d24e1202ebad0f5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:7bc9e133b16b6940eb9c2aa9297134c6d447fbcf20ee1a9eed2540f6d35866cc |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:d8f833c243e418621285d953ac4c7aacd4483d01ea9fa5094ba6d5679dafb4b5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:069b54bebb002817b7e1f999274e96291188f7ab1188ccc2695c1db00a771589 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:72512d420f73c325f866a6cb886e630a7ad794259f561c758f06b21f60951f03 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:37b44e8c7a5639fbef28ea25e4c789ce5fc1fa9cc523f82d5d888038de783c66 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:a7ce29c5ce6ec34721b05afb456931d3790e3b3aa720d90dd1ca1ab41b260127 |