dhi.io/istio-proxyv2
istio-proxyv2 1.x (fips, dev)
1.29-debian-fips-dev, 1.29-debian13-fips-dev, 1.29-fips-dev, 1.29.6-debian-fips-dev, 1.29.6-debian13-fips-dev, 1.29.6-fips-dev
sha256:2e69680407613f7d64dc070bd60b42e5f07147d60e91fb526c449dc70e61f3a7
Manifest digest:sha256:0dd4447c9102ade63abd7519ee876dd603cec6dcd89588c1df3ec1f66cbb6ef8
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.29-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:c0bbf4fca0bfe76d1256ff53a6c28c2e18be0d67b54c6bc7187a75f576f74827 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:f00a5cecf94b3a55da49b6af8fc06301d7bb2c41c491e7e2432c1f0026a9e098 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/istio-proxyv2@sha256:2a756a57d0370e239b3c753a1ff50854e93fe7aaabb75d7fcc5b320f2fac1f62 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:0614422bcbe79cff5abf456c420d4a7d9151c1578bc5be67b41408fbec5f5913 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/istio-proxyv2@sha256:95b0f8a6c390364224e2ed18e02dffc6cd00fd7323703b9a6cc787d067c7c780 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:4b515f90666a7e0d0ed60f2bf829b235bc231a1c1fae3a3e69e7070c3f2c58f5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:2f685a9621779ad116b2c6003745d30494541ae52e33cd6970560ccb4dbc0e8d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:ee996ff0f985fee254894ee3c44bba597954c61a0ee74577cbb692cad25fdc95 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:4f3208ab72ec0b63d7b34efcd27a60a9e77569942c3114e23e3b565488e51908 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:56d97acc25accd1ddde1a254044151d8db2527ae52a52e8a8862717a6cca220e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:50025db6acb4c6cab5a883838850ef7ab5f38ec5a8a284f08860d8508ec58b16 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:82e3f3a17b2e834fa0155af30a187b71569c635f003ccab42ebe99a43183e5f7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:6e70a5d8ae7661f9306b5501259e3c0f74967994a712698766364fc26be54c88 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:cdd53526237cdecc1d013cf5b513381a7b7a0f978738a01b9a63836c3f14cc47 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:4b0549f8101899143dba7a4a7f4ae7a32c3f56d1ec18bb3b543391c9fe281586 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:fd6d95dce3005cdbc19e9696589cc39f0e2ad373d6da4806a584823bc5913d2c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:d24833e2b2a531a9f7960b112ec40ae4ec6b47d809b006f0b6d6d71cdf0df6cc |