dhi.io/virt-controller
1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev
sha256:7cfccea6c86e0ac095ecd3c82a151eab85e683448ec8ac03cb1ee1967c951e03
Manifest digest:sha256:19ed8b7d588037dc1f5ec06443fe88b221d79ea82fb26c9303386bc12a5cb3f7
Size
55.60 MB
Last pushed
4 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.6-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:07f0d80564fb7b203744db647f3bf5c81c0e2dfda111b851067cd4be2b46b37b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:1780add7ed1864df5d9a68c76b2ec2fbc15bfd9f461324ef5dee964ba0f2b8ef |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:a270917eabcd356d60adc541c6e604473e5f0356886bad8758317ca3c13df1dc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:98aa97f8177bc8993a7f1ad2bcf791f1f94f8432e766323d9e5c994053223683 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:c727c2cf87f5614890eff84f8a79a6fed7149ce1766c6cfa0efa6c14ceee6ed3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:50991dca5b2ec4c0fe748ddf96aacb39212db6e6c38f8b79336832934901e2b0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:ab31d100e2947da34dfd677704597e70eaf9a5eb074d65a28535097c18139aa2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:23ae1462f9633752c067d24bce0c9f4f0f684ca50b3dcbe1b7eb4ba57eacc47d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:7747b2983eb93edcb5ef04f4d868b9da3c9c4d2b475e0d79ee753044767c724e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:a10a4f08b1156194014138fd5307c30343be104ec04b438e86ba5e242fc85edf |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:fa4860aa913fe7d6c5b83ff3e9fbfd156ff16d3b39438d3b67ad5df549c4fe5f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:0a7d17231ed2edbc8f90cafc411f6133025811b39d8b623e79087dbcad5de378 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:79d77e723eb36780716d8664d9c676792b03d1a871cc64d706a03a673de34731 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:565aa7a00e0fe75398a02017b56f86b28166c5684519e567068ef68f0d2fd865 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:32ef78648b3abc6c64a408b3115dd2c8f0ed3d765d210a449b9a3c3acdf05021 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:078be7bfe321323d492551238ddd182df5371edf95cbbd0b8952b0be53122ed2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:0712d1221c181c73f7dc51e849398d7b88112a8b1754902326ca296240ba3963 |