Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.7-debian-fips, 1.7-debian13-fips, 1.7-fips, 1.7.4-debian-fips, 1.7.4-debian13-fips, 1.7.4-fips

Index digest:

sha256:251d6ca3abe03c4b1e7a03cb41da7ceb9a142981f3bd893302851738bcf67e25

Manifest digest:

sha256:045a907c331ad32c6e3764abb84263da603d5c34d9c31ae8e3af9cb0a5176ec5

Size

22.21 MB

Last pushed

21 hours ago

Vulnerabilities

0
1
2
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.7-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.7-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:a0b604395ec9401473730dce1d2ffe9b2d30cf6fa5bde7fa0d9d058c171725c3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:f8ed9097f3cfe7ce576019176a9284609acaf9aac67c69b95127fea2772d390e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:879015c79728abbff97158c288bfc9890c9ceb23dfc5d3eec25afd1be71b369e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:83706269847a3cb7b12a3ca6f828dda20255e8c8b60ab263f88b436a77c55734
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:014ab17de4fe9ceeed8425f875ef68c1445533d9b7e192cd82ecec7ae4325826
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:7db1703e94c67bcff57cece87a583f269c22acc514ee7ff86cb894cd2a3ec18a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:79c6b39ffcb70076f3330aa81398cdb19e795c2035cebfdeac7766c4a6b3b7c7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:60db197d99b51bc588a2e66da0146e05966b4d486aa471dec3def02ff66dee53
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:8fc611541d0e3e5da4b914d531c37307ad9b446ea18faf80083f6c7da13618fc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:3ebdfc82a69a2f42b40e316dcf459d3e5de6c24fc0a54e029ec0f1bb396f9b82
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:fb15de9cf9e43a58315bfe106aeb9b7c1ba42bb61d3a847309dbb3b934abf7cd
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:21cb127eac107840734018076859c7461dc365d7532c6fe7c224f6b148e63d28
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:857eb31721768bb58bd71c9ec0cdb170e23a5d61b530455ad4299b9786bdca95
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:38a063b6fe7a69e73517c379e3e1060240c143349b8f55c129b84a2a41e8f07d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:057225d28d5743711513c24ad8aa627e5d8a19c36b05d8502475b203ef1703ed
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:9c52f9bf9ceb183b0abf02b0e32b9f7ab9b88449e0547de833d741b73ea71f09
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:03553034d8c02eaa06bb4b1810744015e756a64ce71b493d59d8d4a2e8b16637