Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda12.8-cudnn9-debian-dev, 2.11-cuda12.8-cudnn9-debian13-dev, 2.11-cuda12.8-cudnn9-dev, 2.11.0-cuda12.8-cudnn9-debian-dev, 2.11.0-cuda12.8-cudnn9-debian13-dev, 2.11.0-cuda12.8-cudnn9-dev

Index digest:

sha256:27952b5ad2db4948fdd9e8e064720a7959de0d38ab77ff623ea0fd1c4178d0ea

Manifest digest:

sha256:9f3b5d04980cb2be55ed955d0cec0bbf04842b392df6d6acce67935311e43261

Size

5.50 GB

Last pushed

4 hours ago

Vulnerabilities

0
0
3
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda12.8-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda12.8-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:072ee26a043fb78a866f187d3ab742862cd5b1f031c550d626ba22dcfd0c3a1d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:b57ce32f78cdd1712acf237ffd588c47dc328dad512653bbf6574da64238aeb4
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:8a9db91bf483b8a1b000f33291b209690debc5468a7096057caad9726ab26d14
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:b44246f7a3f443983b0277e82f62f59a1f4d216cb49b68ca8b90fdf72eac2f8b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:4ec9efa56787fc6826db1b6f3cda206b6b487b883f03235afab7b22036d138d7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:48b1c6c725073d0f034edfef631e56b6e249d9cb9481a77ffa8fbe498f90f510
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:cd2e083433c83f7f823222e848be2726748952a7d94de8ba344f7ada56ed48ee
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:3cfcabe7053788607e25803a8ca71f513413f9fa288c368bd50774785095bcae
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:0ed6a52cc4556880efc745337d06698a6bd56d87bcfdc56a77ffe0cfa2d5f773
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:1f092e3f0733cc3c6aaa6210037b616c615067a451ea0fa24b65baa1db64987a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:81ef29f47126ce6086011d2292f382c9af109f728e06c8e915b823e4199994ec
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:f7555e41bc0fa24ca9566863b5a0bf367fc6c21a7f309b3d31128d184312927d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:abbd0eaf95bd9c0ebd2fbcf71aaccfa6f8901a8591fe759559a5a0e053ea9ca0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:62fd223fcb58223a781b34e1e301438989e12762a02bc87b0851f4023fe32bf4