Sign inSign up
Envoy Gateway

dhi.io/envoy-gateway

Envoy Gateway 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.9-debian-fips-dev, 1.9-debian13-fips-dev, 1.9-fips-dev, 1.9.2-debian-fips-dev, 1.9.2-debian13-fips-dev, 1.9.2-fips-dev

Index digest:

sha256:9065761f7f1fd6bdc2cde5adc95f522ada7d1f527cef840cd08b7e246134d67f

Manifest digest:

sha256:0d6d266c0ba93e3340ada7ba02a40231af15dba9e49b0824d8d545332e0ed650

Size

77.44 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/envoy-gateway:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/envoy-gateway:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/envoy-gateway@sha256:416c2adbd45b7532d2585359dc15ab09f6eb366065f4910c0f1a3df2bb5dec60
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/envoy-gateway@sha256:654971c618cb8eae2fd15650c21f620f407607bf815faac7736b4969664a9fcb
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/envoy-gateway@sha256:bc86525efa0b0ee4decb6cfd17ba21ea381a09306c48af1d0abb1510cf472f93
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/envoy-gateway@sha256:9e41ecf883a1c6375447d8def99d90b57fff358da1863b3966530cf1296d8b18
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/envoy-gateway@sha256:5522697f6b5bfd3e9b5121b3b3a1c88e695fb7a2dc0d99319b89159dbb932d95
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/envoy-gateway@sha256:a7e608970e4467188e5c416f74c0abb30f047a1bdf4c32e352bb4a8935e99f64
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/envoy-gateway@sha256:be3a0a0dbf2e808bd78083b05c36ce8a8bbe92ef37dff54c4cc76e699dcc6598
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/envoy-gateway@sha256:2b7fbb759f1b67e30bf09d26e420685ce1a96bd9c2920697525019af39ac9753
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/envoy-gateway@sha256:2313c40ee780b369c6561c7ef51658e9f9c332120c60466faf6f54704c229366
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/envoy-gateway@sha256:2254f3ae0450e0e12e09b349fb944591a4265edcf548d6d20d1007884ac81b37
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/envoy-gateway@sha256:8f374fcc639ec9e083c3564f96eb0b5a8a180a44d85aa84c4bb18d04d2840f75
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/envoy-gateway@sha256:882a1db03b8ca12907c6a14d3a57c89ece0900840c13f1ecddc17df7c935b7a6
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/envoy-gateway@sha256:3bb6f8944388ed8d513e02accd422bbf7ccc86d5a592f700456b2c56c0ec1d64
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/envoy-gateway@sha256:8ee2f5b62ccc246d13eba41c9b40f0d4be8debd14a52465a33e4b55354c090ef
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/envoy-gateway@sha256:0e0729aeacf7c729f91799ac8176c7dc372fdd1e0987c3ab9d83c90764181513
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/envoy-gateway@sha256:4710ff3b9c8d539d1230f6bce638a067a15683960050effc2dfaf662f1a62551
SPDX SBOMhttps://spdx.dev/Documentdhi.io/envoy-gateway@sha256:08ceea5bcb6c6ac267dd2794e57a069f9b6af4f81860efd94d1b2dbed6d74568