dhi.io/virt-exportserver
1.8-debian-fips, 1.8-debian13-fips, 1.8-fips, 1.8.4-debian-fips, 1.8.4-debian13-fips, 1.8.4-fips
sha256:cd42022927c8261e1c16b51284a43821ea971b6d3c9984aab2a9b030169905b6
Manifest digest:sha256:06138ed17d80b8fcf1ede265281884e8a361a214fe95129c1fc3a557657afefe
Size
20.89 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-exportserver:1.8-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-exportserver:1.8-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-exportserver@sha256:f9ef292549aeafe3626cd68750dd57447c717952e6b4b001590a8fb99c17b187 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-exportserver@sha256:fade6d93723fc2fcf13dfc68be880210bafe1aea3e36eb79852e7251ac133a39 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-exportserver@sha256:876ba54c0236acceacc90d46eeb149a7045c86ef24c1fb6221f82199640977ae |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-exportserver@sha256:610697f4477a64f26542f5f7cc9d9cce60abe64b6e2b5a64d731f627ba3b8e5b |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-exportserver@sha256:8aacca9ef8004e601a2162a8b209a92c934081bb1b12abca9ea0c9ca8ad56dbf |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-exportserver@sha256:040295834d418e099dcb1ddbe3b5ff8161bcd4011d4fd16c1426245f759f628e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-exportserver@sha256:ca96b67fa7524979878ccc20af6cac0add30eafa74dbdf67086fa8e920a3c540 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-exportserver@sha256:5bfacd4d6e3a88ad17771628e5020ca2486ce60e31da9c00a04660e2c53c116a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-exportserver@sha256:7a40b99c188d346295737c54b33e000c46f17ef09f7f3be0d1ffcc32536e5fc9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-exportserver@sha256:e00998997d90009667fd954ce544bec04cffbc241994763abb72a30fe219dac4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-exportserver@sha256:e0b45ae23711ca06a2b4d6e9c9946281cf87f06e9ba37e11f99dc7a685d4dd6e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-exportserver@sha256:93f4b3a9507ab354dfd5f92ebafc4a059887075d255ac4d8ff6a9c2191089af7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-exportserver@sha256:f97a1497ab449325e84a76895c73aa81038d80a8224269710ca8b2f86156c894 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-exportserver@sha256:ea8f032b89fe9bfe4b9881ebc23c32e195bfa166901c6d918286329bb6186aff |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-exportserver@sha256:777f5fbdb40ca2de8e92485b1cc309780a632639b499c4c92af121dbb93a2123 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-exportserver@sha256:331538ebd139ab4b227af5e20dbad353727a034e55a735b0e3f4f541b170ac87 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-exportserver@sha256:a8318ebbdb6c42fa1f51325b3e32f84d529ec94dd3326765a7012383a4801964 |