dhi.io/ztunnel
Istio Ztunnel 1.30.x
1.30, 1.30-debian, 1.30-debian13, 1.30.5, 1.30.5-debian, 1.30.5-debian13
sha256:64232f9823d7979a82e9262723d61a49106ecc52f46182787ef57a9a3e83aff5
Manifest digest:sha256:31fd4d3b0141e3f7a123970611feddbc63be5dfe714ba1da5902647f7d390a54
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.302. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.30 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:49257e50fec169a85419ad9176327b7aafe075044ddc0f80ff467b84ac529155 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:f4f8e419967397388d416becf7affdfa5c4002d0a45b54ef61ef3216c9576bc4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:65ecaffc41a586cc8a2f1636cb879d75b2f32b1a5d9cba8803a6695483ced257 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:7b1e41ae4ded7f55307d250d3911d2099653b10360212738a84c5037e999cd39 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:112045f20bbfda776ab89f550d38c95bd64ac927a902a177091a805da29f5ad0 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:bfb697d0888b963b9b94d773bff22b70bb1b744d1617cbdb6b4671999ba21476 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:ab82057168dec375db94e5b8693be238ad412b7eac3a9cfa6182567c02cef3a9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:06e0d8d5231a9f08c1eafffe18724e49ebf24f1ec844f72540b604992bc66ffb |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:6e86c34342b1f02db443576f56ee7bc28c0068acdfc21bd2845b2d8409f33395 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:1798e4c0ab41c8130958f5de86409c09c39b563afe87d3e747bfc5ddb7cd23f1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:dd2cac6e7a1480e3b07606b1159e8c28a196593d275f42ea6dcc9720dc8421fa |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:40e0e7afcff0cd19e7c7de664e1492ee3e8c1367190f931aaeaf165bec953e83 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:6f9ef7ed0bcb8ffe8c3f33d66435637373fcfcfe944fd01266cb6266de74b08e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:c2a98fe89b66199da13018d525c4ec026bdfc1bd3be2ab9e288021cda112386b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:8fd5f3de42611e04b49e7460620e580080643affb39c162e12552e841a166746 |