dhi.io/istio-proxyv2
istio-proxyv2 1.x (fips, dev)
1.29-debian-fips-dev, 1.29-debian13-fips-dev, 1.29-fips-dev, 1.29.8-debian-fips-dev, 1.29.8-debian13-fips-dev, 1.29.8-fips-dev
sha256:e783c622d2fb5d58e07180e242e77604ecf36e9fb1df6a1ddcb35b78de1e122b
Manifest digest:sha256:527998292ff0ad5cd491ec818893247e0747f91ebb43c57d8004abbd4fd694e1
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.29-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:4d8557550443c15137cf9c60493754a83dee78915bd5c6ea1aa5bfa886922361 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:2ff5ce094bdab2a9ce367bd5f7483e33abbbf2da15e1f393d5626cf4a5cfa1ef |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/istio-proxyv2@sha256:3c8fca49ca17e4bbac7606ac24293b91f7a38abc86af8099c8307c3a30ae3664 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:cec6f1afba941e090ed0b65e74dcd6acf2ef2cbdd5c820275c49ea961328a205 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/istio-proxyv2@sha256:8652510eb9a7a3a462823373df29c8d28344f6cff3fd53e43e87680a70383c04 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:c63925f9ccf016a8dfa12ca4a15206cb9975bdac3a716af411771df7411b5772 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:e82d0e6bf085a60f217e6eb532dc7d36c44d2c4d2cb71f211411e676b855d798 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:2b8fda02264434520377c85fcfae61ef0f7fc98d9eed1cf8d796bcce8096dfa7 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:0623bd9e7dc126ee85e51e6a3525d92715f1ef6cf2aa53e9990421352a582e12 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:0d6adf54eed1c2d98bda60b26aad78be4bd24786bfdd3a764c58346f5a273432 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:581f0458ce2ce4448a144361516c96ea1501e90789c4dd5d6a11594c5ef2ba11 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:5dde34bd04b66a2ae8475e00bf3cd9cda733158b6b7eae329ddbcc66a2ce4980 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:a87f609d0d95e6aa0686a53c35885e8201b86e8b6e9462ac7551551d624854e5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:f67a2846b95ebf0666da67ca4481134345bc16c33792cb0fee3d9cfc5bc624a3 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:1d2a12684909cf99f258870e71eb4570563dfa4974ea8564ae32a1a6ea499441 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:1d7451e89f74e3ca064efd509deb32987fdc872df80728369be6bf4a98a45be2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:cb235edfa65174e65e28d1e9ce111fe3d688ed5107fe621fbd687403f883f5c0 |