Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev

Index digest:

sha256:7169433d2901ed836e38d8289edd010dea90c8ee4d4381ba3f3f38bb6dac2f8e

Manifest digest:

sha256:34ecae3e04ad986876e37e7abfbe6afd14531cbab9e75544584dffaab117db60

Size

48.97 MB

Last pushed

2 days ago

Vulnerabilities

0
5
7
26
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.7-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:70a56c94b6559b7204cdec9bfc47637e1569f6eb0669eb05fe8375991d6f0b73
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:583be1f6231d3e16fabd14d2beedae77ab6ca675fc65e454a7d2574b6ab87776
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:f9f767aafb227a63dc5959cc845b8601bb15b8a113fd3952a6d83919a732db82
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:9a971c7c64a5cf333ccdf34a27263f467f9def651e7fa5f52b487c18c18666d3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:9ef03445e1799395eb6acfd32be9867e3df8d8244b3ac10dc3dbd696126e603f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:d6faa5e26455c7bc77b70835f5f19d3fd19b7963605a390c22ec067af693f2c8
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:453e66e6660aa6a5570b84ca8b30a47efc6ec1ef5becf281e029d1a191c5c8e5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:f76fda81274ef9ed62bdf777dbb9d78ccaacb2bd7b13ab538c94e32b11f4e0dc
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:46f23f67ba7eee40dd11b73c3755b1686d7d31752c3caec9fc3357412c1d7905
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:8f257f7c5dc9a52135507ff7578a2519de3e12fc2dea161aaf2a440b9257d0bd
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:89e4b23a92d03fbd2f62cc1e0ef641d3db3a18467e60e970ba05c8dd983a6fc3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:042e3c25aed906dbea0261f898fc4aa640e842479a99837c94eb056bf8e427a5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:257027b5ec153cee6b216b88df4c720140dc117163e00f8be778fb202407e9b2
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:419a72f8392b5ab2607c25ed26516c714712b0b86b5891c55cbac3aa85ad5514
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:deb3f5bc7c26deccbae6d1fc841c4707c614c3bc0f3ab9ed6a2a291f4ddef5ef
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:f4da6e051cb5dba2c023494abc9c76f6712bb5efaca69e685d38b1be2738b7d1
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:3b1706c2406094d6f5a97733d68c5962dd7aa9205aa73b7dbbe60788589d5c3c