dhi.io/istio-pilot
Istio Pilot 1.29.x
1.29, 1.29-debian, 1.29-debian13, 1.29.7, 1.29.7-debian, 1.29.7-debian13
sha256:929352b7510a3a05f8e0f6015049da1001f3cee135fa02bbfa0061da162b22d6
Manifest digest:sha256:c60ff941e68f5f57e1ba13f5067cd14262a6bf4d3aef2ed8383dd47d7b1cc691
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-pilot:1.292. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-pilot:1.29 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-pilot@sha256:e84d8386aef86d9569fcd1e076c8760d845092563f4dbbd4ec9878d493379ace |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-pilot@sha256:fd93b9266090c32eddac45a0f3b9fba4052c179bf45a19b4d4214ae9cf041915 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-pilot@sha256:293b057724f9562187d62222607f5efe5476ce6a0c6661509bbb6d2155613571 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-pilot@sha256:186178aaaeffed8b844aa6ba2449136eb945c222f942a7f9441cb7f4a15cb5e9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-pilot@sha256:63046e1a81fd86b61fd4d9990c19a3b052406eb0dfd981fe23e00597e9d6ee46 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-pilot@sha256:f0045aa1a28a46b5a38e20004d80491db4f525add28fe5ac19cfe09f091dfcfd |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-pilot@sha256:3526999151e8f53883b4bb04403758e1e89d01d0136db4c3010ed460cdbfb571 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-pilot@sha256:5fac79d6a12168d1c1cc3051598cb99f4d5f6c10543c6161bba91c0841349a11 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-pilot@sha256:a3b150022c09b500a3a5dc48d603bff9a614a7ac23602312b022d00bf1cdd426 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-pilot@sha256:ffedc75570510bdaeade4e68ffe6bf28ca2596b687d83756231fadc4d1790e1d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-pilot@sha256:8dc5df7687e3c5f890feb389883774217715c43ee8f74103c9da39c142ecc806 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-pilot@sha256:0a035e9f6b19e8668b5a541cc7ec326052388541c40dc8b223fe62e6c3f6f4c2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-pilot@sha256:5b66fcbbe1b8b7b3d4e4dd89cfa2de81990a59b0b32dc6a38c2d0d3a74a70aa9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-pilot@sha256:d01da5205361dbaba269872cf2e98f1d9b8b977bcdcfd2f4b8f163bb7d8ab242 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-pilot@sha256:1c5282032afd886b2c3035c29bef63e5aa5274f2fa2e06b507bef3a03cdcdf96 |