dhi.io/ztunnel
Istio Ztunnel 1.29.x
1.29, 1.29-debian, 1.29-debian13, 1.29.10, 1.29.10-debian, 1.29.10-debian13
sha256:13d273d4a91ae2f5afee68d91eeba96a2f14cf80cbbfc44f0c0f0467da50ee05
Manifest digest:sha256:215b40e30ab2d720d256976429df81ad5ba9a55d8245dc5fb8bfc70fd8ce33ce
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.292. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.29 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:e24e60ae9f38f8e5c25b39b1ae5394122a539750ea122d716a069bb67d473797 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:f05cabdf99562e3527666e1349e12d75b2e9581aec4caa4fd7ba03096b4ee1ab |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:5046a5f791c0acbcd22ca23b1e40c7b4d05ee3650be5e067fa80347ef04c66e0 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:2b1fb58ac4ef10dbf454bb404b953c351df1e7bc3848cbf4e55d0cfd23bf5bcc |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:8a544a1ceca1d79abe947a8c9ad29cbe29fa0334f6f58c4fe453895edd495e0d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:b599ba8a1461b11ac08a1adf298482dcd9731bc1ef1bd9f11d60d2a38d4c808d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:d13827a0b6c9ee03a16128ad58596f5f6bcd4d293095bda181c473105529c10a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:5ef54ed69b136a4a8ce03fa2589210f40734119cd3b8a2168030e38ed9af2b6a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:fcd25302608232c6aa66d257d1c9f894c359ff78dbea6833c19061a6fc766c82 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:77a96667e46e1d08dbcc12ba85ea515bbbc34b561dc46693a4ec933b2082a8f4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:a2f23a5dfac2d5045c3ec4b5d545a099f38949bb76dec594e9ab303d5ac92d67 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:495bbd6dbf916e104d2f0d439375207c831d02d3d424dc8a3d04c0e86526692c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:e47df604b4da03476aa753ed0fafa03342e1f005125704fbfe00b0e4568b35ab |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:3fe5af4077d9633dfd404dbbc38b09c0465af550d22b911403d249e070821a1f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:5595554f0d384d7545afb8b69b1b0e165dc795c4aba87dc6c728f6d64b3f4c8b |