dhi.io/virt-exportproxy
1-debian-fips, 1-debian13-fips, 1-fips, 1.9-debian-fips, 1.9-debian13-fips, 1.9-fips, 1.9.1-debian-fips, 1.9.1-debian13-fips, 1.9.1-fips
sha256:be058ce9972fe78bddfef2cf51fd5e6b10b8e21a62fd2e9f7fb7c7f9ffc28353
Manifest digest:sha256:4a6ec9d6a7c6bfbc969f6c787dd65575776e2f593e77fbd1cbfbae1c93638e43
Size
23.64 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportproxy:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportproxy:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportproxy@sha256:5fb2b083010a24b16738aff68a227acf98bcbe6e1ed922cc86ad2e0c2a9372d5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportproxy@sha256:38c2f57454d903bd8617df1a549821d7afe820f54b0d7ec0c7852b1e6350ca40 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportproxy@sha256:de8cb8cf728b47701620a085876d5f6807347578f21872a3b7de919f4bde4f6c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportproxy@sha256:3abb2564cba0030afe8996b116b2eeeeb27e9dc2615318ba637be513e8e4b8ab |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportproxy@sha256:f9622477d5771fb37ad319045f44306d37f7c138464dda2de97ab5ef44b884fc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportproxy@sha256:409b377ae0deab77d0ff7bd9a4dd3a9554fc2e9e9ab17a9cb9de8d117d043603 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportproxy@sha256:764c81bf7e0169b276875087d682058597d025da4336a39aad3f349f4f85ee54 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportproxy@sha256:37933927f0f7a0cdf31518f753e4db35da08bac195a34d83fb21cc1016339524 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportproxy@sha256:174c7bd0483bcec747bcbe58a0406574e69c49de4990fdbcc16a45f889f7c1ab |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportproxy@sha256:a925bfbfbb5bfcdbfe14db4ab12fe1f28518635e9eada555755ced94acdd0203 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportproxy@sha256:1652c802ed10a289342695d8e9d8cb96a1f34ce8f5c7d774b56a3f4e96f4e6ba |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportproxy@sha256:548468591e82533af1af7ea0b9544989e1757461fec51e401547271013ab686c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportproxy@sha256:86907b2b860c2110ae737bba4b1a9b369146e5b08196ffa69d2cf6ab120f4642 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportproxy@sha256:8ccd853f20371b627862fe6781741804f35abbcd3fe9f4f8e9a7d69bf2de88f2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportproxy@sha256:bfcb1ac02dc917b7aff758f4d4c846df3dd4f9253d058a0a4969f10fbef0ae16 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportproxy@sha256:28484294eb744aefdd083f91f8cf3931763c65fab6e0c6312d63a34793e79b7d |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportproxy@sha256:f1feee99febc7ae1493f662ce092f2479d8584d4372940cd72e216f79fc07f08 |