Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips)

CIS
FIPS
STIG
linux/arm64
debian 13
Tags:

1.8-debian-fips, 1.8-debian13-fips, 1.8-fips, 1.8.4-debian-fips, 1.8.4-debian13-fips, 1.8.4-fips

Index digest:

sha256:cd42022927c8261e1c16b51284a43821ea971b6d3c9984aab2a9b030169905b6

Manifest digest:

sha256:06138ed17d80b8fcf1ede265281884e8a361a214fe95129c1fc3a557657afefe

Size

20.89 MB

Last pushed

9 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:f9ef292549aeafe3626cd68750dd57447c717952e6b4b001590a8fb99c17b187
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:fade6d93723fc2fcf13dfc68be880210bafe1aea3e36eb79852e7251ac133a39
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:876ba54c0236acceacc90d46eeb149a7045c86ef24c1fb6221f82199640977ae
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:610697f4477a64f26542f5f7cc9d9cce60abe64b6e2b5a64d731f627ba3b8e5b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:8aacca9ef8004e601a2162a8b209a92c934081bb1b12abca9ea0c9ca8ad56dbf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:040295834d418e099dcb1ddbe3b5ff8161bcd4011d4fd16c1426245f759f628e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:ca96b67fa7524979878ccc20af6cac0add30eafa74dbdf67086fa8e920a3c540
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:5bfacd4d6e3a88ad17771628e5020ca2486ce60e31da9c00a04660e2c53c116a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:7a40b99c188d346295737c54b33e000c46f17ef09f7f3be0d1ffcc32536e5fc9
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:e00998997d90009667fd954ce544bec04cffbc241994763abb72a30fe219dac4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:e0b45ae23711ca06a2b4d6e9c9946281cf87f06e9ba37e11f99dc7a685d4dd6e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:93f4b3a9507ab354dfd5f92ebafc4a059887075d255ac4d8ff6a9c2191089af7
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:f97a1497ab449325e84a76895c73aa81038d80a8224269710ca8b2f86156c894
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:ea8f032b89fe9bfe4b9881ebc23c32e195bfa166901c6d918286329bb6186aff
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:777f5fbdb40ca2de8e92485b1cc309780a632639b499c4c92af121dbb93a2123
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:331538ebd139ab4b227af5e20dbad353727a034e55a735b0e3f4f541b170ac87
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:a8318ebbdb6c42fa1f51325b3e32f84d529ec94dd3326765a7012383a4801964