dhi.io/istio-proxyv2
istio-proxyv2 1.x (dev)
1.29-debian-dev, 1.29-debian13-dev, 1.29-dev, 1.29.8-debian-dev, 1.29.8-debian13-dev, 1.29.8-dev
sha256:ed475db5e4abbef89a4650f765fc6aa5eb8123411670bace086508b85596f189
Manifest digest:sha256:055466433670f43ebb65e4e8a8e8c3ebfdfb79322c66f268ca1e0c43a96bd5f4
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.29-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:91f84a9226e2a5d94e97fdefabffb8b49ebd2bc75f29b203e743d34a8c916254 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:44891c14e36278ffa5446dc3917038615cacfd96983e8262fe3658d70f5930fc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:50bb797d456bdfac37854adc7d21e8f8fbad7d72a733ae86644dddb54e78a0fd |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:3b9cd85f795ca25e2a22d7669c64821ee942eedf250708e32eb2f75fc4519de9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:fc561e1031a7b850b3552f4bedee5eac97885bada1336d7f139ff4b26a65c4d8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:3c1aa7428932f1dabe6c18f8ed285d1fbcc84766bc057ea88524424cced5187e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:1b0361cf9e6e27caacb0b8b8662fb9bb5c8661f0a8896b63986f4fba9c22f925 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:84b947c8693b1a14392caa523834a2ec67d994f3658154ef276a49e42dd90619 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:ca043df0d5c5b9edfa5728b54fabe582e373f153d1b2f5f6c2ce4096d6ee0295 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:20046733e70d138dfc40ec6b046ecd8c671e765e0b98cedb678731d17424ac21 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:e73c30b3ea55d604e9663ea7c0818617fa1f819c2821dce81c0c30dc21eee62b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:1cedf08cd7b7f97fd09eb1c7a823a95829a105b14cc80825b2663f6a29a018cb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:c8749f7c8a49ae4b90af57acdc03a9df5fc7196aef14d0c0dc923876246f5199 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:d8e6fcf5a0cdcb7378fe1e388577266c3afbd2143211fbb4d1d8000536ed83d3 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:b79724c0971e659d555421257d4b5145929a683ecc979a63d9feca918351ab45 |