dhi.io/istio-proxyv2
istio-proxyv2 1.x (fips, dev)
1.29-debian-fips-dev, 1.29-debian13-fips-dev, 1.29-fips-dev, 1.29.10-debian-fips-dev, 1.29.10-debian13-fips-dev, 1.29.10-fips-dev
sha256:67cc0c26b7c2632c8bfa4b6a49e78b440404e80e8bf5ed377d7b98e2010aac17
Manifest digest:sha256:30d4f7c54b83dbfbd930758412c0fd9842fe5f11619b4d658b6a2dcbdc5a442c
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.29-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:65e0ef25d44fa781adc819b44d4117094e78113206140e70f48770da1bc8b0d9 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:d0175cb9eb92dee38ae9d67232e0faeaafb54be648690d56109e9d45c4240c71 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/istio-proxyv2@sha256:5d10915de831a53788b1e34bd4529dfbd7b81ce98f14c1187a8a6c2596027003 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:d763eb06dbf7f01878baa17c00b91eb1f49bb1fc0db6da64ef3657966a9472f5 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/istio-proxyv2@sha256:d882507c54fa5d0eda8f484e0d6cdc20df83e111769e4dfa6da916b95e36a428 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:f55c9c240c4c71a50c422e7587b780cafb0ebc180464ceff412f0bc64a0c5039 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:5c96bfbc478080d1d0ea896833261a0d92b5f976d39c9ceab4905861295ca64d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:f41eecfafda7a49db2c7df7739227a9ce64303da15faf3fa9c1c1bc5396539a8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:7926dd38e0f8720d69dfdb193ddedb8850dd777161d8026dc082a46858cae68b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:0ef74745112bb8fa2ee7798a8d4d338a8fea5d77ab4cf7b5dc28709c7a288937 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:c7f5a547fa28bd786e89d15da3f652cbf8990b71cfe11b15fd8ce034e44eea67 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:f73606e9bad9bc7cb7e16332b2d8b2bf5c3eac2b2f47e4c4b7ab9a359c496347 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:45f58b9790d450320d898fbffe8e2b9996ac144866f73397e511aa97c3dc4775 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:7fa92fed483fb4fb77933c7434a44cd0fa0d1be294085e20d621a0d5328e4e5e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:68f0f2bf7e9cb01f1e3b93498095c2aede0038fd954191f3318c6e866b7ea32a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:90abcf0d82657237dc8302d6155f69f81865dd9e762a4890233dcc6a896d2b91 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:f0c62bb2ba043776c168c21dc571f5ded2fd978e038f2ec8015398ea9d7832a5 |