dhi.io/virt-controller
1-debian-fips, 1-debian13-fips, 1-fips, 1.9-debian-fips, 1.9-debian13-fips, 1.9-fips, 1.9.1-debian-fips, 1.9.1-debian13-fips, 1.9.1-fips
sha256:a29349a9aa5998a1dd5599a97057837edeed42fa3116be9c195a14069502d0d3
Manifest digest:sha256:d544464b6940485662c5b26ab89ca0aa6332c309abc3024925cfaeda22a76308
Size
25.19 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:0fc48901342d3581f1f5d06fe0abb8a6e491a69063f86f4e743b0eaf328070c6 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:5ee983e575a4259c950212c8597485d87348a61dd9f8ed6aa5394b1caeb482df |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:39f6a80d0662806413016ebdfdbb6886215677d6d7ceb8fbd7cadc207255282a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:49fb112cf640eb3051c6a0a6ba8e9a78c073c5a695ecc630523f0b6a11dbcf0b |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:e061c7d79c9e0a3a206b89062e667e3a798b95515ef62a8fdef26a03ca549eaf |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:6ec21461c2e9043e63c80e1cfd05656c4aad4b71ed1bf41cbfdbfaee65d2ec9c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:d842760845b543fea271460d8bb4b9ee2f046b3ead65d2bfc78e563addd88576 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:4311bc5ea07861908dddee98a4d340846cf183079e0b65a36dce4dbc1eb03008 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:0b000d7fc2366358a35cf4ddd70b56a090667ed376f91210c9373bc9666c8c59 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:da6834cfee0d0f430426dee53b7db1687c104682bfca3d629e83169dbbcc5646 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:3738d9093b311b1b47185bff6dc1412ccd78e633f4d8b57e1452429cb2a09dc9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:d86491b53eb94c43047a6617312321cd749b1e29dc4f8d8cc3f9a0e5707d6427 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:6efcdfad94bc10e1566b3d4d4b9a2c62621e89199f051e0114482a43ecbe1d1f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:6601b3bc46ea67dc5cc9759a37b19ffe3ec4352b49a887135f9337a5bcfdc70b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:c446e8410e676b23d04c2c0e046d8a7a332893694ec125398bed70e91980071c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:bd230d7fc8c447d85dffbad83ac24973e8e096144a20ca636be504d0475b2e6c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:be8460887cb71d7fa34213a8c9c18955920a4488343dd304afd0c65f1da6d7a2 |