dhi.io/ztunnel
Istio Ztunnel 1.29.x (fips, dev)
1.29-debian-fips-dev, 1.29-debian13-fips-dev, 1.29-fips-dev, 1.29.8-debian-fips-dev, 1.29.8-debian13-fips-dev, 1.29.8-fips-dev
sha256:36e4e067fb7ad150fdb4fdc02def2ca2bdae1bfe50ceb118399a3c297d16fa2d
Manifest digest:sha256:54502002846145c4bb3c45919cb0b5d27df95eb538bf49de5aca187124371ee3
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.29-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.29-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:7d2c9d75fa82de7446dd28715abc512015f8135e67a13ca1d7ca5fc3f326be07 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:ba2dc6ff6c96f65ed4d3cfc58681fa5d6eb90bb12e221dd7fde17e2f277ecae8 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/ztunnel@sha256:c9145d1b748828a656acb9f01f9778d1c5dcdfa307593d2fca3c8fab4ac48464 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:391426d9b0a78ef62e4335e71302af83d9dc1700900146ce722603ca7955bffa |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/ztunnel@sha256:175d483fdc0d1608f1616ef87dc366e82a0709d5a337edd4b2ce36dc1ecc11d3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:67b86a4a4d8db07b77adf00acc1b9affe79f53875b8920d9ece5a686910f363a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:f7f4ee5849e8ce3b6a1892bed52237a232886b9ab3ddd989debc1c91fde66c58 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:905bd407faf4955634c1a0655f9b18005998f54d44636f78cfd77859ef501dd5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:01f83a7bdbfbbfc04a693e9ddd09e7eafb578376b89d8272ebd14225a2168885 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:89397861754bc10235faa424d14c5cd87b98a9a568ff268afcfd204c4e555def |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:d138936bb26c22bb6d2bbde92bee889ab1735e29b940ac14dacb146bdfb9d5ba |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:07df5923b66a458330ebb51e17506317f14dab2961842cb957df72fddc86eecd |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:61d49354b37b49069fb52f60734370be40f97ccf9360402de06e7745d82e76c8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:7f2eca44a56c34ce901c149227b6da1ea44a4179fbf71be8facbe5be0c548755 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:5bae60753e4653d543580140fef39a8579bccb115bcc2c0051c29f5a97729ddb |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:e37fa2762ddc284f9b2a620a4bf334de52923a850c18864855a9954b66624277 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:4f27bf52a0e6f0f0a7482ae52cec44b3b2a5987eb22f5c7e6ce3b4ea1c1b149f |