Sign inSign up
Virt Export Server

dhi.io/virt-exportserver

Virt Export Server 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev

Index digest:

sha256:da2de90798b07d089e829872f49dd3fd16530204354ad12819dc156d10e84693

Manifest digest:

sha256:8ae051600664a34260a42a0d0ac86cd75c743c2ee14f41189d586e3fc0bbab92

Size

48.93 MB

Last pushed

18 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/virt-exportserver:1.7-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/virt-exportserver:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/virt-exportserver@sha256:93a9dd9df07315b32f1fb87d0faf37e69ebe84387476b02a3b9a98a16bf4ea7d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/virt-exportserver@sha256:391d2fd5ba27b793ad85907156029ce2b54e145bff668bac43e8aea95adc82b8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/virt-exportserver@sha256:357498e029e8dbebaf0a73d7afc26df30c7e425afbd847883d52bf171e1aa443
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/virt-exportserver@sha256:d3a7cc0064ca5b13cc81148731892eca201a1e9a027dd72a19739beae82348ce
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/virt-exportserver@sha256:516c5f06be0fe4d22cb9a5b2d8a4f03f25842da20682335a720cf664944ab50d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/virt-exportserver@sha256:3a92ef9dab0aea3c2cc215da182a8b4947dd6553be5bd3bcf3f0c5c1ab113949
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/virt-exportserver@sha256:506e9f3f1b096c80e2e65dccafeb0a2d38e7bc530a4da2b302f2dcab4a627644
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/virt-exportserver@sha256:af63589c0de75c0471e61f48db5afab61f294912e2715ee9909c1ce1fe8118d1
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/virt-exportserver@sha256:0adfe6ffc4866febb2776df41c58ad255c5b7393b474d27d717283fc4bc9de50
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/virt-exportserver@sha256:c00e2e09cc8966bfaf27e0cb69ad96b968150b27c0d26a891c33b5ae29504c6c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/virt-exportserver@sha256:17a96cca8a14807111ba02473bfcf98ce8f9c1e70fc88c58222f85f728975edd
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/virt-exportserver@sha256:5205a3f43b51949dc25cc0a3e7ac5ce2f0f393cd0ebdc8687bb0d5b7f40e45b4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/virt-exportserver@sha256:8ec2d650a864b27b0735445de1451b8512ebce010b27460d44bb0b33061e268d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/virt-exportserver@sha256:4755e2fad91eeb4ed677e4a28e4ff8931795e6f6d569249b15baab9ea2441d01
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/virt-exportserver@sha256:29caa9a7502507ac652596a94a58a369d69dede0b8f94509d4733d889858e64b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/virt-exportserver@sha256:19cd424fcb7666adb1e59a24f2cf6b57b60a954feacfff279e58928d5fa11a11
SPDX SBOMhttps://spdx.dev/Documentdhi.io/virt-exportserver@sha256:f33a3fa75707023595ba072d75caafbfe947622b8db03053f5fba8dc618838e0