Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.9-debian-fips, 1.9-debian13-fips, 1.9-fips, 1.9.1-debian-fips, 1.9.1-debian13-fips, 1.9.1-fips

Index digest:

sha256:89c9c3fa961637aa6688c61b4815c1ece939fb2b89edcbc02350cad47e3e3eee

Manifest digest:

sha256:7d14b69e96f00878dab8fe76c8c77bd6f8d8e46e81b408dec96073e8f41e4115

Size

22.82 MB

Last pushed

13 hours ago

Vulnerabilities

0
1
2
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:5d9476003a86fe74a5c8bde64b20430af5fbe7bf29c02e66d858beae25e19dca
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:ac4a6d47a27261e978afaaf3038c217adb6e1c26f48cca746cd1ddc913ac48e5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:0a15d307b22acf72da2a56db3f354e6a1b2d3dab4095cb4a2189838aa0ea3530
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:89295ea02360ee1a5510be3cb4be9756e53a32251665108e5e2f4e128deb6c4c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:b6410d95420b5789ce2d2f80110d1afcd2ed5b2892bf3b844cc4b9d4d8a615e1
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:d13d57540ee93c4211453753a92e6f2ea7e9da2f1e3d6540b7710b07ac493382
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:c1714ee2a694917f4f0068b653937fc94a3cf51c4780ec1373a68df396860f10
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:1c3effae5dfc028235dc6479eb344e1014e809c0ee05be61e504c2d24030c93d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:2ba79de188a258f16fd88e678b08c15b36112bbee181a5d8d399b2267c6eae18
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:502d0f86726ef62978e8485373b81430c1811fadc26514951ce01e163080318d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:791d918822b3af99a3ce49944173bffa59fad38758257df35e2a18b08e6d6d47
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:bd9f8e9719c7851172dfe677a88f1dfda8dcc3dd81c68bfdc0e5023a12a33f29
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:1652bab2e027de93ed8754f2f08a2c153a6f50486ec2c0450f7b0f5ddb6db1e0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:e4012506e1289f9ceb3c50fc86f965de8c9e2acedfce356a6c711ee8df0c49fd
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:4b93994047966037d10c8a78ebe067eab9d1d7fc604b572c7b3ed8713f793e77
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:fbca1372476068103737bffe5dad4ceb51b6b308ca8d45d41a009b903d8ae0a8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:81c3e0237764af1b708b6cc1821c7e683f5bc5f56c44b07da85ec4a99b229b60