dhi.io/istio-proxyv2
istio-proxyv2 1.x (dev)
1.29-debian-dev, 1.29-debian13-dev, 1.29-dev, 1.29.8-debian-dev, 1.29.8-debian13-dev, 1.29.8-dev
sha256:7efadcc141c4d9cf8ae1c908a6cce5b5f19fce2574502a1a3c19c6c9c1bca4da
Manifest digest:sha256:09a9b85083e7265f3e0c9906a8f9e0280e70e2831a0a7ab915ef07be153d2897
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.29-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:5bbb535db550f149471ef9ba8d3c4a6160a2f91ab3fd37696c830501d23c7216 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:500efc38e9bbbe71791fe68e76d69110696d4eed0844c4a0ee614f3652e543bb |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:9b1655599f8c2b2041dbe71d092da30547131dcc296f3d624a06fd472279e718 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:0e96011f07c2aa1b96367a1928c84ffa445ea293852823a26efc4d66d265ecdd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:462edea356f1ade84eb0f07d51b26d047f3808dc85af7a7fa6fc0719fdbaadd2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:b548aa47d1cc957ed837dcd40f3763783f8fd969dbab92502411b26f6a671d13 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:3761be0e17d6e09dd417e07ccd1324ba2069d24d670afb0a157a423a750acdd2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:2a78c276b9ecd122a893e6652bc1a815a287f9f3605f4646e0e3c14a615e8b97 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:874a8bc6f1a0936973113be6ddce41f6c52bf2bf7c323eaabfb214a0c544b859 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:2cc656617bfe0156d5b2447203913e0ad720e004a24576c831a3d6fc38ab39d0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:deac8e2d1c60c73c2b3caae9906d4a5a619616773928447785d7bab9ca848c47 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:3d3400cf93a06eb0a3040b76f6b84a3953b99462ea9dcf99fb303c20448347a0 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:6a4c3f64b3bc588d4007289c90ee99382c7c4b31923f1f3216f96ec12eb1c0f7 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:4a669fdd53cc4dba0134b2b80a9a3eef82a79f05ab94c54779b10a5eb9e6081c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:e636633b3d8d80521f3ed97ea4b212a5ce51f62dc72f8d30244e7a3bea4c5c8c |