dhi.io/istio-proxyv2
istio-proxyv2 1.x (fips)
1.29-debian-fips, 1.29-debian13-fips, 1.29-fips, 1.29.9-debian-fips, 1.29.9-debian13-fips, 1.29.9-fips
sha256:061cfd2e1c0d2cb99e7a16f0f25cfd465347690c7c537482041528e3f7439f73
Manifest digest:sha256:c672f70a88f28fc0d2887ebb59dfbd4d0fe5aba132d52047c3b6149dc030d69a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.29-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:993a1c14361805695469cb258bea895f036e0730fcad93307780491d664955ab |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:a99ec93a0e545cc1ad8ace62145a0a580b06951fb016b0b92e27d5d195c82d35 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/istio-proxyv2@sha256:891db2a5449ac85f2d2ce713e3f29ca3df4077e57dda3bd7f7d5fcffb18f6616 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:5aba680f93754d58997da52fab7e0d1fa7057111997bcd52ced48ae23edb42ee |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/istio-proxyv2@sha256:5f49baffd9bc007ea91288b1d9d31b9099b1c2ff280d186ca932d051bad87701 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:a0b52115223bad8d54bcb39e7d0d1ba67f9a53f8a3d8f1494bf1222e90cc949b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:43390211f9a6917071dee141ecc29b6d8c90a67b892965e7254f5b0184c6134b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:bbeca541d438be71eef209cc66eb39bfc916a0d5c750f09c29a7c1343a1aff35 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:c00b476d257acb01867eddaa7418ea15d24387eecf334d4056adde254611f4ef |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:8134f82f8db01485bfaad25e68ad56d6fccdf46c4cf470ba78acbf146674ec90 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:20bf26dc2b72de8da0b87cb87d8b43971211b620f4f2c7799d34e951ed62f386 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:1bcca5aeeeb3f854110b027945b70e1abce29ed777e9e584f8df0acee18747cb |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:c2e8bbbf396de2ba9537d2e5efa0e2db528fc1462505ebabc90248439392f9a7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:bfbc6c1181b5f83cf931e601bb7fce8062c3dc773c8ed70ae46f3cfa019e7e10 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:367eaa90d3612eff65f3c024c1467cc02f76cbaae333d49b6027be0ffe169605 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:811a113878fade705bea6c90d2363471bc5d1888acc62bb1f1647f17510257a1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:825d9b94dbde4bc18600850c3f64b73b5c0abe3ec8d06fb1dc3ab93e1fcd45ab |