dhi.io/ztunnel
Istio Ztunnel 1.29.x (fips, dev)
1.29-debian-fips-dev, 1.29-debian13-fips-dev, 1.29-fips-dev, 1.29.8-debian-fips-dev, 1.29.8-debian13-fips-dev, 1.29.8-fips-dev
sha256:e88e6f42c4f19c7794b51c014e6be4672f91de5e69e17701241447ba3b5dae90
Manifest digest:sha256:0485b06fedf7a69c508439f06965e1e3a438f7ee845b8ac4d5cb76b4aa64d328
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.29-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.29-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:b17c5745dd0160dca10e0b59da1fa2d356ce8c7c225e962c0dd0995923ba23b4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:c53f04962c8deb7fd013452deca61887ab39b290584892b9d5a174b355f867e9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/ztunnel@sha256:19fdea78a20efd3c504ed5421ffb763edc3e583a1e72230d27d82eaaa27d91b0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:1a23d5311146b3f1b312bf0fcd0c9e9149370eaeb66eeb572099452a3699f582 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/ztunnel@sha256:ec034ee288aab86b7cb61643fdf6e1c14cc074f9bbb4bd35d3df7d22b0953df6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:0cf022b082c6f4ff35e45b8a759632be9628227fb079bf29340f8485592762a0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:1898a73de93b42f274cad7fcd89e4eb3868dafef0dabec541ad42749f1c9268f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:58b1e0e479b383d632cac41e6dced7b1fd3b7e9c89e3bf10807615466706b24b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:ec0ea520d28b10b84f69b5cb0092ac774696f6a0e53c18fb54594c051fc4470b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:0930712563c88dcc0f308daf41c337447bf4d39464a71de98aea4055ab21cbaf |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:29c894be2b59bfb1d845ee3df1afb92f6950e5278143e8ba620797c9dfd72f31 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:4d3533f1cf7063cf41b4620e98b1bd8b4a9faca654fb6cca3b4568ee050e7670 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:d40e262ed0badba01742e0704f0bb42ddef2113166681a1da7e65cd5840bf0cb |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:46d33f9a8f50348b7334f1019a41236dbdf36514ce75eb530c63435b66d12a15 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:0a8d598369b52affe9b1f4024d8a29a33f8c25b3b1fb193eb9391fd49318f4c2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:918c7e6a355158d4c694ccaf5cc5877d609bda356a8be769c167ce1ad36d080a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:59976cabea568012410dc09e09d8365ffa885885f89d203138d1508f0c98169b |