dhi.io/virt-exportserver
1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev
sha256:d1dec521df7347fcb4f8a63963abe1e39cd28b96bd4e583443f0f823c8f7ed00
Manifest digest:sha256:be1b5e4d9d22578ad92a2651638cfc002870639b4da68375b518247bd84ffd79
Size
47.88 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.6-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:c40ebfc531d3cc5801efe97b54e7ad35d8150d7c371ac677b758d448b8c84549 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:848c1e0d35c5bc012901d305d2e442d23745ff455d42003f68dc158063b35dec |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:6b860c334494de8956412d26ef11d6c29fb332dafc96f33a3a2322580a8c483c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:6c09e922bff2bcfac84a56410b1b64071e3017c097f0faa59a895c7425fa2de4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:c2243cf5fb03ef161f71c54fd011790ded42ec364b9d96332b5117c4d67e79a4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:3f8fcf9512aa28959bc18671a89a9ee23b3dc2ef741ceff512c7d3b471d9d44a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:b817e8329d02ce826eab32f94aaa8ebbc9fd014954d0ed2f12ce798c0fa9986b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:fa318752fcbb39ef1666f1bd12be205d657c6f2f2a97bcfd7aff247f94646667 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:ebdf96c6dbff2dd872592981a758b47afc5958cddfdf167bdfe488e9b16055bb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:efef6b272d7dfaa62cf9423cea930302ec4572214206986c9ec8ce3c86e9138a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:53c51805491abbd47aa5ffb8baa960db8ed906156c21c2157e4f38acbac7c32e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:179b1cae23fccf22de482a92168020c5ed467a59631abeda50ce89a6107f2b01 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:30f19e999a9973d4e3ba6269241f5c32a3b7d01650542cdce3da2abf7c463c14 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:b57d4a3a668a36771cd9335d71c60bde7e3dd67c09c95ef03d00d8886e59dcba |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:cd620084e731f4c3e9c51e4bf232f0991c65401e9606b378f50699ca6a323cab |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:9e433d0f3a649565ecaf20374cc55b35afc864223589197d39d5916808173272 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:6804e4cd27e718a1eb0d92f86e31baaadd6a282c86882af1979e5058b7cae0fe |