dhi.io/virt-exportproxy
1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev
sha256:af9f2612b6385e9718a86cf1dfba92189352cef15c1b42d22679c6082e2d9cf1
Manifest digest:sha256:27276f83504f3d239812c7bd52bbc7a331673d7c97ba7cf6e44a76799eafa40f
Size
52.01 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportproxy:1.7-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportproxy:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportproxy@sha256:ba688b906d53a9ba59f25a644113096c51a951d0406deb7c5e3d7947705ab250 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportproxy@sha256:37f903473f9d9140ab6e4cfa0ba54a3997ee0c83869f85e4c8db008b7d65cf5e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportproxy@sha256:d6c600a4285b61cec025cb09c28a5d816cacd93dec906be9024864c955b7f473 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportproxy@sha256:b92d0004fd58851db9072acbb6445a08644c56bf72febfbd77c6dba87e9db6c6 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportproxy@sha256:959b289a1e9669f03e493b0767c654f048f47e65be7222d0581a271c3cb5755a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportproxy@sha256:4453d63173ddf3801bd3efb2421c14d5f292d154c29a80929907b86a0f128658 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportproxy@sha256:250adb06faeb28b36c251c41fed1df9cc849174d8e2ae364d79e1759859acd70 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportproxy@sha256:eb0563c1d6c705154c7086e353df1cff3696d7edd08ddbc0200e89c7fc0c1cf6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportproxy@sha256:6e95aeef285b31a7c98935f457d36eaed8610bbddefbb7144e3bbf53593d522e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportproxy@sha256:2f2b9bb0b4308c2cae1024cc5b93cbf647c6151b4eafee9bcbe5676076ad9090 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportproxy@sha256:9cc0c8c703cb71022b3c48391d8707a89a04d801a49189a8795ede15dd693b9c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportproxy@sha256:e7624f745330775270264f1b67e6845259cb42cb6e5c56596be72ef2124fda7b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportproxy@sha256:b1a903a759a40579e92805a2c8ab78e1a34375e793d61bb0121b7787f7dc470f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportproxy@sha256:5f2cbf19d68047efc83f83b8d7f616a9ec3eeb0661a3cfbc17c7ee7170ed3ab3 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportproxy@sha256:3eea47bcf303db0a2afea5f34f35faab18e9f963038ee6690b607c1e92cc9fc3 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportproxy@sha256:d30ae3c1d576088966c40b2f3fe1ebfd786c5195fb67ca9301add9d62e7bbd13 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportproxy@sha256:4419fa41e12dfaa5a03a6a01fc91c018c4e9f795c0ff03bbf5ab75e9d2af036a |