dhi.io/istio-proxyv2
istio-proxyv2 1.x
1.29, 1.29-debian, 1.29-debian13, 1.29.8, 1.29.8-debian, 1.29.8-debian13
sha256:30f0ef9d9fb0949b28569d926094ce555a9314d1fa0416bb206d780107abfda7
Manifest digest:sha256:902a4f60eea5cfcd8689e7c0e9fdfb712202022b47fff0fb83f771b472739d2e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-proxyv2:1.292. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-proxyv2:1.29 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-proxyv2@sha256:c1c42d277b1c0a44a79a26367725faedcbfc72ca7ae7f9669c3ea79969e7df2b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-proxyv2@sha256:1fab5a4b67699bf72ee7b9ac69091deab3b7ff4e1a635bd7a3bb7ca1c2d9d5dd |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-proxyv2@sha256:a0637a0c792cc6cdbb93075b5780e85be141caa9f33e7c702def400212ada16f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-proxyv2@sha256:652fd1518f471e7f7efe70d8da954ace183294cbb126362663c673a260afbe31 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-proxyv2@sha256:c9d1e45f31019bc4a9442ff1cb63dbcff856df37a04b68412275f8226287fe12 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-proxyv2@sha256:5f6e58569e075c2142cf408e1cb98571e1000cb9e7c54c382131a0207b1db124 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-proxyv2@sha256:22ad93bfa12d1449c07b0e6e08f67c0603ba7b35d5d168a9924c5cdb77534eb9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-proxyv2@sha256:e37bff0816dbc1793755093eff56cdc31209c8c550ed0f690550caf6ee38f6d6 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-proxyv2@sha256:2494884d7d0ab1da714b0d6a21462eba504615dea5d10933b8874ec6a9ae2b59 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-proxyv2@sha256:115b70f1ac1b9c35f3d6a1532ef1882044b7b495bff9ec428f47a6716d4c4fee |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-proxyv2@sha256:d997ea81c63432189632cc220f33a63b50f5388b8f1832275217214d11536771 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-proxyv2@sha256:d2680af2a64afcf35c4b1bcaaff92c5cecbfd59e39f1b0aac196611ab26d8948 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-proxyv2@sha256:c4df6fa9ace09c99f6e6f673cbe8c36791f83db315632ff7e27d6a77da71e599 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-proxyv2@sha256:fefe05fa3f30698dc388022dc56666774a47785f37201ea59c1c1386a3d29e36 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-proxyv2@sha256:dc1d0b338ec074d2cfc82bf68c4f939f11f551293094ddc19dacefd10dc254a9 |