dhi.io/virt-controller
1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev
sha256:ca2c4300e8d2e72383c74c6d943d4fa0e66dc1e10956d21115bef4c21db1e406
Manifest digest:sha256:11f56967e6e6023bf0cf800794f7282a44ef050df504bd4478be7fe633bb7a2e
Size
56.59 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.7-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:c976e9cf4d52b4f43a47d845a6cf4f70765b4281771988ec04b5034c39b9f609 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:4fc5c4478b07ad39e32c0ec32331e1c0f017ab31797707334140c10a6ab484be |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:ee004c353b5530caf1d5907689c91277020b66a51bea91b923dc0bf0bb20a017 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:bc310c362566ffa7ae1a4773fbb027cfbc30f19a3e8a37ec9afd6ee72e52659f |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:ada8a0bfbe48d94682cd80743e13039a5bb954c63744eadd81197d84c4f231f5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:31abc234dde173009b7df6d59ac81e6976c2f6644cd59b731a55a1a44ff6e90d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:c894e65059e79a7e945c9fa9da822d0a415956225c881e82a729c8ebe65b30b6 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:fb90425dcd6cccfd2da01080f6034c83232ae98afea0b1d388ac4b1c865624ef |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:ae47b471ce736d6e0c67242515d29d6cb9c568c2a19c15648e6b6f9b8e4be1e6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:bdc9175653d23ecf5b98b9d6fe0fe6fa8259e3b1e4ca3cdd43c3bb34d43e06ba |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:8e78ce9d1d44effae3c649e68b753f6d0135ef14f1f06cabdf568e2fd710da3e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:6209c9a63a0b7dd934f8317e1d846ce086bfe0189afe6a17fb95ca7aaa7f099a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:c52e01cab70def0a9356bf20168522b2edeb7f74cbcba8890686cddd135a3915 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:585bb67632a14a265d4d1494f4f2a01d9328ad59989adfe96d1302dc425bc8a7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:30d73fb0fb1dd5ff3f2c9aa993752870ce15ca9a396d320a2d1779f3eea5e001 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:25273f8a684ba62c1ff12d0638ca09f7a454158c2c9489aa6af89b629f3121eb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:86dd1fc00f67657017dadff050834686b4140b8f5a8db817867e90f88ae3999e |