dhi.io/istio-proxyv2
istio-proxyv2 1.x (dev)
1.29-debian-dev, 1.29-debian13-dev, 1.29-dev, 1.29.10-debian-dev, 1.29.10-debian13-dev, 1.29.10-dev
sha256:509d123a184ab7a8385a4833a5ba3c9a0e0c908127177b26a1ab5951eac6b694
Manifest digest:sha256:601cb8b95281a2fff387716adb7abb8a07b0bc96bba23ce46f3150c69c4a5544
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.29-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:aa19f64af37d572c10565cab9127afdfd373940949ce9ff5d2b40a246c3a71ee |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:7b09cb8cba552a6b4cd10bd834f0406403a731d3df173a10cccbd31da85d841b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:3c48b338b9c5202b3996f56d816efc1698a46858b7548a8a009e3aed9b9148fe |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:b27b285aa812d35e663e6133461b568aad0e6b87291abc5a2e73bd066cd69917 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:c71c3f3c8008cfb1c1b69c89a7e1ec1bc40861582c8fafc5f1a115ea007f493c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:14e26bbad575bfbebfb64de155626f01775815ac75e995cb8aa75fd2f1420f1e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:f89020f0daee54551868d856f952aa43798062d787a7b439ce6cd44ad0bd817a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:c239c650bd995957490f1e0a6000b7c95e8689187b7df2f29ce52dfe3e231a45 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:d7792f8a591b5c35a4ae96df51096b8204bd2be5562b72b7ec9dc5c3e9e27220 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:0817adb31cf43567023e27e8988e03ee2b32b4dadf0e8bd137853df86d9faac9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:bd79ad0efa0a169f3b79ec2d4cd3da48c07777380a52d1a9728b86ea2dd6b2e1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:4b818e87237ffe7bcd8c6bed3df3ee2306448355627d33d65cdc0ecd3ec80683 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:80e079b481708b242fd55e92b1306a8c95c46c61bedf5e4047e8e2242719fb9d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:251609b418750f56f5c608404544befbf69fb2b1cd8c23595389a458a7d69f03 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:7fa4a790a234051decb7326ec18611f5938b2a078c007f2411cde3c5e1658159 |