dhi.io/ztunnel
Istio Ztunnel 1.29.x (dev)
1.29-debian-dev, 1.29-debian13-dev, 1.29-dev, 1.29.8-debian-dev, 1.29.8-debian13-dev, 1.29.8-dev
sha256:9d78571d7fb88642062a13c32d2be3e2917dc75167da3b516c875f8f18fe2a96
Manifest digest:sha256:914c9bef235c61976517a6870188eb8eac62daf8a21d2a2818b24d0d2dc18521
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.29-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.29-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:9faa90f35ac9e555dee4d3bf1dcafea6c426a72ebc49e6ed0eab4acd7fc34c49 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:ee827b1c8ac79f82e21c24ad23053f95854824d273b78027e79b6cdddc0ae1e3 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:42f48e021d8ccba2ea9356f080abddf1bc9fe11dcb487957816cacd9add61a24 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:d33cfaf0d0162e9d96dc2d16ddd10610e5d3592fd137fe623ec2956db15c0918 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:fe7b814365e08a412b0d488b86f589b8b5bc2b462fca54785f9161b48508ad1e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:3afc9cd7efc825ce9dcdca3dfba9d92b8e8c0605ee17de0a0a4e44aee41a320c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:5d2bd043f08bcc1a969fb04c1a5d46eedeee63d7335b1804560a41c9af6e8c01 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:2eae79399ed4c8f4e2a0468494ba280fd21acaa07b5b7cf885695c8f734504a3 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:902e212d48f84cb2ef99092928efa78869c2718019369b79b272e267172dd52c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:8c649e9a48bd65826a7eeae0123717e862f07ba8f3259f2c89c8d64e2db28143 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:5f6cad666a064770ffd6e598206c86688153fb83c5a38082495ccbd8d882d5df |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:598dec1dd4db17fb6eeb8924a93bd7a7d052ca8e30265de2e4076bf30adb8d05 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:aa17b06fdbbdeb4d3bf9b24614f0a4e3fb565f8da2ec699cdd7878a91d8ce2da |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:4df4fe022a508c64d9eda223c1e0bd644a8bb0d9b5518cc1f8f8f3d105ff4dee |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:3338a203f98fac688b8311d68449a19bcf0dd3e30106e95c9c746676f44c72ef |