dhi.io/ztunnel
Istio Ztunnel 1.30.x (dev)
1.30-debian-dev, 1.30-debian13-dev, 1.30-dev, 1.30.5-debian-dev, 1.30.5-debian13-dev, 1.30.5-dev
sha256:a8ee3bf462969941bb0e141b2dd5a9d29e6ff0bb23aca5750e6c1daaedc3b650
Manifest digest:sha256:f8978eecfeb475a80ff856b2d226dd679cac13340f1948bcbccd556f62a3c5ac
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.30-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.30-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:b833a751a72b795857f2676b565dceec1952fa9dbadf08d9bb8d4003afa73712 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:8093d8b2a89362fd7b39f3dfac7de49eb517041fb1ad1d973568a3f7373898c0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:fb6a547ba7107dedf18177a95537c54babc43ebf30d61dd74ef3caa15efc47fa |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:206036615ff530efeeacb087301383e1ce3aa3b9503913eb296cb20ff9ba58e1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:b7fd1305057f61d6cb0afcffe234644aa0d185e5e868ba85a940fbfb53db1c29 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:9f587ba71348885568920f440430223f915c0471b514e4c1873679b8a0cd8cc2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:1b612403205f7f8b78e540e24edd95a315cf12e80e2822b2d7d7e5b491003662 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:a0d4d3f5c723ccb5eb14ea68408aff483617f31f76e9f81823eabe964cc7ae6d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:8f668adc5c3e35294a50569cf1db958a05957819a08daea5215e2443786b6368 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:f9fd228bf2cf4304c9e51a2508aa9e2076c39b64762fbd947fe96b25b5079efc |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:78b285be430455086fa99c9ac73201ab7e3aab1e404f8113dd13d8fdcb6c0e16 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:da5c3ae89aab7ace478cc8f6080eeff61daf35ebf0c3e0a58d217cbb0e07cd25 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:a7ea3179f944c6715c2b768e8a5e1441d30fdbe0747b3cb57bb37ccb6c1f1a6c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:ff624046952ae5af460d7b4a1fe06cd6b0b2d4cf3fb7fe56eef04f89ae230f96 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:ddc22bcc8f42385d47dce8b62790281dff55e9fadbc5c083b92a433406e8c27c |