dhi.io/ztunnel
Istio Ztunnel 1.29.x (fips, dev)
1.29-debian-fips-dev, 1.29-debian13-fips-dev, 1.29-fips-dev, 1.29.9-debian-fips-dev, 1.29.9-debian13-fips-dev, 1.29.9-fips-dev
sha256:4c9bac15d7b79c08c0a03086d75a580b01e6410c154b7adab00c1b911371aaf8
Manifest digest:sha256:7048845d46d27be7ba9fd7c988bd161c298c1f7a0be0127ddacc98088c8b36ed
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.29-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.29-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:77d6378a66d02284d04bf08316d5a2869098ba8a02e198f11cfd32092edfd9b7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:e10654bcf1c1743826cdd4897eeaf5facb7f055e060d104801741be1a8a8a1fa |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/ztunnel@sha256:56b678aad6ce309bb14ac46f3b3df52a553b476f8392c65c90a8b2f8aff26eaf |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:325f3323c98677d56bd4b40dc16f675dc702fc6c6e427de9a034ed2b86dae289 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/ztunnel@sha256:444de9fe149f08a9ff73c7921ffb5e688b54d81e750b66f1ebc54c24cacfde08 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:24b69394e5b02e7077d939ad6a455d0f24ad450d6c2362510dafc72a03474aa5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:a633e3401170fd8573dc08134fc3230c826da4a4a06785a0cf2900831761851b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:6a2bc8f8ece78f52bc3cfa1c72dc981866394b5b02edaa45df28c8a0b1295ad2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:b7a541ac7067f38a67436f26051256853d9cb27560bfeacd7e9a5b6ca17927cc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:85c9b021f122be74c8b2fcdc22d58a1504c6ee908efdaf4db78f5040ac673f17 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:0b59e2bc5cfe6405bc7972eac5cf6d71d7324ef996c24a9cfeb4a0953622bb44 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:6f729fd9a9cf4edda62ecc3ae71a235414247cd3c614b8b59107d69c82d02c14 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:301e3da78f18a5189ddaf491c47e767723e1067a76e89211db17c9e632e15c7d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:2a8bf32d1bfac00f816b9fc2e9d1b1e30537963d4afae3a440a6621482af05bc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:6a316588720133e62298e0029f43e71a91b26939b413764fa691fcdc7227a973 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:8e8c0a41769b4ce49004f707bc3c4ee0349b10decb9b27302588fd25db2a662b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:945a69fcf3853b159c36681e9c7c68c733923027879f2bffa32ce7e1a1c837b2 |