Sign inSign up
PyTorch

dhi.io/pytorch

PyTorch 2.11.x (dev)

CIS
linux/amd64
debian 13
Tags:

2.11-cuda13.0-cudnn9-debian-dev, 2.11-cuda13.0-cudnn9-debian13-dev, 2.11-cuda13.0-cudnn9-dev, 2.11.0-cuda13.0-cudnn9-debian-dev, 2.11.0-cuda13.0-cudnn9-debian13-dev, 2.11.0-cuda13.0-cudnn9-dev

Index digest:

sha256:26f6b80ee6a94b788a3651b22173a1eb57839a48c4ff607aa9d778a0f56154c8

Manifest digest:

sha256:41c1c9f7369a5564267659c558c49bc6174504b08291a8387fbcfcdb1fb8bf4f

Size

3.59 GB

Last pushed

9 hours ago

Vulnerabilities

0
0
3
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/pytorch:2.11-cuda13.0-cudnn9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/pytorch@sha256:089481ac6d78222efca61706686dffd947a43beefb07dde057c25843af863dff
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/pytorch@sha256:92a5bca983fedac504285049c0cabac44e39b3d6eca83cc4859be695bc381c6a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/pytorch@sha256:07966a645d270802a31ba55aa675f3729acb9886e0ff96140a34b04852ecba4a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/pytorch@sha256:f035b164071a934667890aca7c9a6ef2d5ed8c23220d390cb0ce5be1a9a11522
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/pytorch@sha256:29a5227990bae273ece569921326304a35912051043839148e9467f42b8ffe75
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/pytorch@sha256:8ac45afc0e4ceaf1670e84f005f01fbc4fb0dc546ffb8452780ebb56e1221c51
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/pytorch@sha256:1d92ce90f9ea4f3993ad80d1afcbe811351f25132c62cb6b97a45e280ec4c31d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/pytorch@sha256:ab039164544084bb85e9ea91b6ccff8678c282c666aac146b9bc86d7e461c722
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/pytorch@sha256:cc1e2d630a4351ec31da071491db99e28c77aeef52b8e9c368a680728359ae44
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/pytorch@sha256:154557f7131f8d72cefcb349bf3ddfc6b9355d9f96b485067a96d98d546f2a0c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/pytorch@sha256:ac92c1c4fd4d2d6f46f932fa18088a82f6fd1f3e5fa0925233d4d78e9078ccba
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/pytorch@sha256:2e6572f7dfb461a2a73278ba79e86da9dfff06cbea188e2a11970306f0c69e03
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/pytorch@sha256:753de5adc7b66cee19e06419f538d40751f42c2bc14749cbce2d3e4e8571c11e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/pytorch@sha256:b26d434c45d0901469e495ec9cd161f92e5ebc517d418036226aba4aa446b3bc
SPDX SBOMhttps://spdx.dev/Documentdhi.io/pytorch@sha256:52f43917458fdcbbcb472755d84db02f46e94823f5688915766f736fb09b7741