dhi.io/istio-proxyv2
istio-proxyv2 1.x
1.29, 1.29-debian, 1.29-debian13, 1.29.9, 1.29.9-debian, 1.29.9-debian13
sha256:a2321a92b8683ea304acfa4ce5bb991efc4bce696e785b97ddecbc818bf99bb2
Manifest digest:sha256:59577b8c2abb4374e3ccf3eb3db5b5064350e47491294c0760c097856d97dd7f
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.292. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:d71c58ba28a2a4e38c1b794366db332be2af39f7c4d44b93db0ae42f67e54967 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:4bd9d0fbe41a54d77c4b7c708a95d99680c8946381df599fbc422b1889986a0d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:49e898ce7729dc2ced2650e0ab54e7a8e1261554d990a5bcdcf077dbd282e53c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:0bf54745961f9e2b0a394de1250e62b077868296e885b0948b545dd203a0acdf |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:5ea632c03f0eab8156931c19fc508c63b4bb9539d6824ca0fa53e14d03289460 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:fd7edbefa470065022eaef017800b983ff05c8d8a14e923b47bcbae6aad95904 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:97e0ed1c433289da1e900efc425b06038a38b63b0899fbdc4401da55759acec1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:59cd397e8f4b7bd36969f0fc6e9615b507a6375e564a8bbff36e4d296c44e403 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:7e471b8ebc320e48dbb61d3c7f47634856880e9dbf6fd98baa67a6659c548182 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:852627e0654b000eb62884d869d640750b27cca1ce98b47699275b6c63728262 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:81d1d9416ba929689d6d7ade592d85755e7cc9e3018391fc31a5be35853899d7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:c1412b3357358b21b5c2d85c60bf942320787707bee638df1d1936acccc5886f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:7db5c5236a246965a15ad887ec09d7ed4fbd45a4fd117171071bc51d28a91968 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:3275e71b171941d2b1afe505891c8749d010739366b440fa179c61f3ae5e36af |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:90bd22c4e7c41275964b15c9a33afc4dad6814751316b2ce502150a9b7cfecd5 |