dhi.io/virt-controller
1.6-debian-fips-dev, 1.6-debian13-fips-dev, 1.6-fips-dev, 1.6.6-debian-fips-dev, 1.6.6-debian13-fips-dev, 1.6.6-fips-dev
sha256:cca9a1feffe3217a66cf87b79cb5a8f4a08b87a2fdae2b4034741a0a45897214
Manifest digest:sha256:5715d767a014cb1ffba869f7b6a98d59812f0428f3df0bfd893e13b98440c6ec
Size
55.60 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.6-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.6-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:3a6e23766beaa9ff5bf7980e44938113f6d8c0c16ffeb29f3b39c674afdf5c73 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:feff1c4156dabb9f328df47206029828df739e5a269f92aa756d3b3508f2ab1d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:20387537f654c515307b339b1683d153979b6c075c8160432b31906d73ae85dc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:5c1199c1be340b9f699d4dc6571da62de70cc96c5dabc68387a7af47d6d3cd7c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:31fc8bd02ac8b476920cd99ef0d3983085b1a6e35770cf5b6bd38b6fc1643095 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:f5e26ba521f07ed8eda5b250f3f2334ad1fe35fb52c1d4a90d8613ceba969be7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:75cb81ef474557b669208500144154362da9acaeb39176d7ccd9528f7442e5d1 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:849cd81ced374c0ee0297cad30a474854b5759ca7138202851bf4dd92a07c265 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:b2d2aabec7ec721e1c6330ec7c9be95b9af663775aa53e88b678f6830a9d294f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:b42eb9a6dcc204bb9988e44f927a6650b5e7eb68ede7f2daae634b11cf02a3db |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:90deacb6c5888a4c62d9f5113c0a19a5ae55ab183bbd8bcce63026f5095b8dc9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:d45075e1f598aebb486539edfb73958fb38ee1c52adcaf10ad04653fb257ba48 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:5a2f530c9c7fbf74a86c44b123828ac8f2dc70ae50a1ccf07c392e3e15fc57f7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:1ce57eb2444af67ba34ed2bd0860135c8d33f4a1442938c5b545209b675dda0e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:299ec4923bd902902877c4f49ec6a1ab76c99daa0ab19e92bf7327dca19b4d9a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:9004a976e95e6704ae83a070a8fa41e761abe05e24bf8c20c058440844493d0b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:6d4cac1ebae3e67275b6b622968fe2bb406377aef9a9406af8b202f6e46af909 |