dhi.io/istio-proxyv2
istio-proxyv2 1.x (dev)
1.29-debian-dev, 1.29-debian13-dev, 1.29-dev, 1.29.8-debian-dev, 1.29.8-debian13-dev, 1.29.8-dev
sha256:79b7ef111880f377de70bd9870ef6ed2c4bf004dcc0fe24488114380b31e213c
Manifest digest:sha256:bf98e099e33ac6e805aa48135004cf85f4c62d6e8209ebd04edea29bbb77bcad
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.29-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:3280fcbd867bd395fb5894d94034e11a9d262315fb2d343e9256b3cf14e88ee0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:2c0258689700102c601d1c1caf023a4e3421dbc7f0f6666f68262727753fef97 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:3f808eeae56cfdeda6a870a9d1d61c78ca23b553e0e44e084bceed31221d85e5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:2af598c13110513b41f9f8b1ae0fbc997b7a8a5e4237e7e1b91394a97fa4b271 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:8df9ff37879e0572c100094c6cbeb7ab339fb8d4598fafaf6796ab1c5b91a90a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:2fb033290ed3b5e8e4acc58a4585e2681c2b2bbbf6461da89cdbe835a1947d1e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:8cccb9218bb2bfe8d8717186b56fe433c8fd91427f1a8a4cd7f20f8c910d4e46 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:f02b0f82dc0130790f02643cf0cb5c47f719bd42edac489a609752b94d0a7924 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:621a8809954d5a9460f7de897a015835e9a574bf903ebada01a62a637d1e5cec |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:b7021195a7c96d53437f57ba74bb18677aee9ba76f83f7d59357b6f230903a30 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:693b42dde710488f788252703fa725450b94d49bc4b7205113496a8d05bcadcf |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:a74e25a6a6f7378adc4ecbb2f19397bc8b99a1766801596f0b9abb973c26b46e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:e7cf199aaf9378b962dc54f7abcc05ac1aed0ba1527b6fac936247c66bcd030b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:42a6181c46817121371829f33660222cf34277a6b9ab4756f4f3bcda8d501bd2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:ed3b8a6c08cf81001ce75ab49b1da73e286780587cf379af4a03565dba080e54 |