Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.9-debian-fips, 1.9-debian13-fips, 1.9-fips, 1.9.1-debian-fips, 1.9.1-debian13-fips, 1.9.1-fips

Index digest:

sha256:9ec011f00d96633bae7867b96c22e5006952deddff7535bd2b653c469c012753

Manifest digest:

sha256:895278bfaa5fa11ab1af312bc0b016aec3dc485eb46f831f97445da46a429355

Size

22.82 MB

Last pushed

17 hours ago

Vulnerabilities

0
2
1
9
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:d66820b00319d29bce4f739847bb7b80f88dcd74b8b8128f9cb85479e21eb891
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:c6bfdf9600e8025fc8bcf9dc65b69d64dece815488157ad87386bb0a7ea295ec
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:9c66e41da3347dc4634df76fa89f8dbf2cfb75a54f45d71f8511ac0b37864097
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:c91fb8ce8bfb85ab1a550acc9402e03bdc1f7cbfc6eb3f50a7d46c83be7defd2
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:c9c6b37be3917c3a510d23785b12d8e23bd40ecd7789325f3e0362ad88a5819f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:49ca98e4207dbaefa9cc896b64ec8fee931b9a291f32ca35b2e71df6221d5701
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:35775ccb4c721ace546dc8fefcd3d887b317eb68e4da7b815008ed1f45bd09d3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:3cdca1ddf7cc8b8a7aa44cfe6b29dffca4f877464a17e97b121c0e84dd478f10
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:3f031b2cb6538c766abdc93896b69fdb97072e205a031ffb3ee47882cd4fbe6d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:4dcf997ddd4d154ecda6fc1bb9301d4c2d1d8d6793865c08e1d3fe0d26bbd3a1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:e363ea852e9f060d2445db87e81c4ca19b811035a98c728ff98136109a7206cd
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:cb8577da44418751bbbafb27637e2b03dfb8c85fc72299b2baf5c5e21e4d1692
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:573ae8585c9e3dd6393736f977175d3c922d1f82834205b7164adc3300f91d49
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:41709af5cea5bac7d3f13de637a59c07741acd0ea8c0cf4a9a9a16802e0f99bb
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:2789b2d72cd9e78077b9d85e08406fc61bc7315ba2ac16fc1cdb2f2256de9948
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:02805927b2b264e10deb75341f45af3cf220284fdbb57c1d0e44f8ce0a8e0ed6
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:b43bbb0deea00c01b6f5a9e506089fc2c12f729e648f8f344dedc5e07f264eed