dhi.io/istio-proxyv2
istio-proxyv2 1.x (fips, dev)
1.29-debian-fips-dev, 1.29-debian13-fips-dev, 1.29-fips-dev, 1.29.9-debian-fips-dev, 1.29.9-debian13-fips-dev, 1.29.9-fips-dev
sha256:8c37f0d89b47facbb9addbca4634e906dc7e7ba272e407ebf6c109de4ff12530
Manifest digest:sha256:0de38adcead8152fcc9ad066995656ddf4201065cd75b62c59e97638977d7860
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.29-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:dd4ce202deb4c7da2b2a02c28eb76583ea2c49f110319ea7de4dab26ffccfdac |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:0a5f5c1661d3dfd79cac0682ad48a00c9c052ce6b99087a9322ff1381cb38bd9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/istio-proxyv2@sha256:361a89f475ee2b093134956e6124e76f2fd8637802383600a755a98ea263d86e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:0bac0678d15e9f0d6232e418db1b231e9dfe4bd64a8adb975171a00789e42e5e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/istio-proxyv2@sha256:24cae5d70a51f63fc4de6f8e024fb4b0a692c7eab222a807bf6f6b410faf49d0 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:25d4c9e93f57999ab2185c3c41485108959acc1489ce0a217418b46112eeda99 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:408b8ed1b514217f469e3c7b5cb61af1d420cfae5945029a34b83edcd300a6e6 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:ceae0a39a7ca2cc7bae7907ebf4587f521b67b76281aa38d8e2a9212843283fe |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:c4e02b02ebc4856e55e31312bd11cbd346323b4905dee7d13c6fea6c1a15bfae |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:ec9315a3d5800f2f8e8f5425225073f8a2f9c692527989f20a52a21ca385bb5b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:023035dcfefc575a3e676a1d4ebb41e4039d8a039448bacbd14520515b56ebe1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:0d62f6f5701c4f88efee51e61d41c010ccd2cfe10c062c61cb9a3c11f11e051d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:164a5ea6c0e734b7409edbc0cb69737422c1505dc1b35e373b7dbe40de710b18 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:67beaef83eb8c511fd4a53f13b7af77f271bacc4cce5f343ee8cafb148efab19 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:e22390619a81162a2115207750296ff32eedb89509387b966a4d4c087a7b1a8b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:ef37b84e3121545d93bc474ef9fd6834972d3fc191a503e29ebf359d4febcd32 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:6d1ce35614ba7714c6f09e7502921b20429901bc1be69a4235d7f006e9346aa2 |