Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x

CIS
linux/amd64
debian 13
Tags:

2.11-cuda12.8-cudnn9, 2.11-cuda12.8-cudnn9-debian, 2.11-cuda12.8-cudnn9-debian13, 2.11.0-cuda12.8-cudnn9, 2.11.0-cuda12.8-cudnn9-debian, 2.11.0-cuda12.8-cudnn9-debian13

Index digest:

sha256:80803b1b2488f7f83be2a5611c29f05ef7b2946b35e0c598c1939c2716f57649

Manifest digest:

sha256:01c12f8bee7f0f41b4ff484359778f40644bc1b7fee6c41a256b1b88b5a9672a

Size

2.68 GB

Last pushed

3 hours ago

Vulnerabilities

0
0
3
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda12.8-cudnn9

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda12.8-cudnn9 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:65c731d30fcd743f1b8dfb50f9fb1f08fe88c01c449370ec6602e4c483e83b9a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:da293dbdb7f8e7d801b6b0d360abb68d8d130d7a4707e2da841c175a78605977
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:0ab3a7d34b5fe56657fe54249562b808bab1ad4f817e0dbb8887210d5fd44b91
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:e22c6d580636c95df5d5c7953cedb05b33a33e7c421f8b443266962f604bedcb
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:65984a9af6aa4ac2c5aac701157d78020204b58c9a8ef01c682acf53ac262cb5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:4f2e09269f185b7dbd0f91c3535ac50f45991789a4b44195c0ff749682b0c712
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:7ea5fd298332984f835e22605651035bc296a5d4d61d49f1814322d1aa2fad6d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:1135ea2fe14ad0c30b879f5eeb5b7a9eedd5e8d187e481718e8e84a131a1d46f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:f3a3c402afcefe181924c7b2e8c183b2a677c1c4a9ffcdcc6c375babce921b4c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:11e5223d2d1129a1f9e17c26bfb4fa59549536cae777756172ffd9f967779c30
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:fbb35c94b5bd1c482dd6d899eb3404b755c83af2ae658e41df5b9ed21169d0c0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:027fb26b719dcc808c5c52f6c020391b550a59d556d6400dd6d4c8de01b4c145
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:11835d48f94e4f36c15a64a83859ea21065e3d72122e9fd022d134ecc2a13d76
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:5150d2a9594c333e3168a4617830e8dbd2dfdf08182a128da4412533a3dfbbcb
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:57a38b3a15986e04983293ccc59b788ad85bc34ed72f276c2e5ebfaeecd82805