dhi.io/istio-pilot
Istio Pilot 1.29.x (dev)
1.29-debian-dev, 1.29-debian13-dev, 1.29-dev, 1.29.10-debian-dev, 1.29.10-debian13-dev, 1.29.10-dev
sha256:92013fec528f0b6a29668910b41bbff194b23d15b5ff364f1882ff6e7553e23d
Manifest digest:sha256:ae371c816a613f46361a394cbb261694eda3f911bd88b904d99c52583be9b3d7
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-pilot:1.29-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-pilot:1.29-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-pilot@sha256:a2eb1fdc2014a3774df1073b5a65b7a731a1adaf34836f22029457d45607df8e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-pilot@sha256:f16b9615295d6e21915588cc3246fc361c0ed00a1ae17e1a325e22222125933c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-pilot@sha256:3a4ea2d1a6ea124ec12784488c5f62acb50cf89e58b4473e6de9ec60a2175e22 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-pilot@sha256:a3d40afdbf19f6e8baace8a6adf8d4aefd43b592f67ea6efa553892ebc39c02c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-pilot@sha256:c95cea8f58e417088d7f1b1772fe79dafac59e76029f03b1b2e248bb7c2c249d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-pilot@sha256:7f0331ed2bb98d30c3d21da08a9e7d4400be96defb303e31bca90b9de3a792c9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-pilot@sha256:1755ac7f243d3ddf9cd74aea39bd2ac39e78568bc1b71015ae5e4ef3fbb5c294 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-pilot@sha256:6a1391a05016325220bdcc58b3d4b5a03eba0d21d68008a4d35cfa59f18ac2f8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-pilot@sha256:2a0ec7102ce9050061d9af3e510ec2cfd725ea8c858d76b63f749dedf0264209 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-pilot@sha256:dc2b9fe80b31e34fc5a75b06144177f26e6782a5dd73b8b16af803dd76fd2498 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-pilot@sha256:9fd976fa84aa10cb3993b10d0d7acb354231e57d4983ab182be3f16df8b091f8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-pilot@sha256:94a9bf8c236e8c6488dae29c22bd95280b6c304f4df14634c44d667b185a81e1 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-pilot@sha256:f0e3928d7c54da5c779dd1a7ec9e275d7b188f8e294b88bc757168f3446af7dc |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-pilot@sha256:1264917a5d4ca9699a473289d2c96ba6a5fad9630e8263129972a9a005b637a7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-pilot@sha256:e835d1b054c037d27a87ba32449990dee8186f5ab2ad2de94802dd5a81b43e45 |