dhi.io/envoy
Envoy 1.36.x (dev)
1.36-debian-dev, 1.36-debian13-dev, 1.36-dev, 1.36.11-debian-dev, 1.36.11-debian13-dev, 1.36.11-dev
sha256:fbbd734a51ad2258e84d6b3b7980130453bbb41037a683b7275ca40520ebf97a
Manifest digest:sha256:2acd46cddab34f37cba20cef6d3f0cc1f925b818def4e293392b1b71c5d24c2e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/envoy:1.36-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/envoy:1.36-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/envoy@sha256:0541fc3c18513d8c215ac35e2d293a632c48fbbdb185bf961246ed310dcffcdf |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/envoy@sha256:0a7d0b699bf0a302c21e3cc5c1c32ae2bc3efcbef2c75d25d5bfdca707bcf396 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/envoy@sha256:251ba24bf23ec3726c6cecde6695744ace58714922001e7883a89b55c169edaa |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/envoy@sha256:a8e98b8b8a8e2816535e7a0dba04f3a7782053bfe2caedf736abd21a768545fd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/envoy@sha256:34240b7c356c3de412cc33a150242c8aca69d83c4b73cedbcad07de761cb33ee |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/envoy@sha256:3032e1de061af105bfc27b45b38e3d1bc5d7829417d0684a2c65bbe742a9aad6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/envoy@sha256:6dba98ae6e6a726080b57fca8254d4999d3dbdd70038bc8c7e7465c6dc5f64f8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/envoy@sha256:cb2bb6eff11d44175db75dd78a4a22390ed543d5b0ee686e19d9f0ee39d6b909 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/envoy@sha256:fe45cb52b36f822443f0532a11b5333405002092b74a3849533e63c56873ead6 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/envoy@sha256:1db127a35c47c06193def05222c168060d181b2d333c980f0b17cfdb8be9309b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/envoy@sha256:3dc22e165dfce38ae0fdb2fc0ecdcb49ccc8db48015bdf5b43a292250f95410c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/envoy@sha256:2af37b98318238811d3a43b6fba64551338f8fefcfc422d2d0913d80dcd8ec0f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/envoy@sha256:84e6898c9cee3ad94d67a34de2a6f3e7c0748cd1c8c2410e390a5e37b18a2662 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/envoy@sha256:d82a5c6d74a3eacf74c6ea1455a4f96c95dafa6d7231733d7e689224ed90508b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/envoy@sha256:8af9b04a34282fac8a64c48f8b71b37a200ddbd6fd2f5062fb4e69d691887670 |