dhi.io/ztunnel
Istio Ztunnel 1.29.x (fips)
1.29-debian-fips, 1.29-debian13-fips, 1.29-fips, 1.29.9-debian-fips, 1.29.9-debian13-fips, 1.29.9-fips
sha256:4fd2b5fe55862fff70e959857cc0d2b0bcab4d968f4994e0145c90d4c8dd32b0
Manifest digest:sha256:58ef641a6d7dc000c4d777896c117aa94c9e9b872ac24bafb97ecb7cc9656a14
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.29-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.29-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:cd793cdd3d6b8a0505683bf23194a6bb19193ca3e5189241df97797084814c93 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:fcb82336d610f70be0af676217576ee6eafe576142a9642676bc48ad8a2173aa |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/ztunnel@sha256:1df57178275b4a2af4ab4ad1dca88b8ab53b54fff389ecb3c0a38f9febd223d3 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:a7151be8b49b8bb3f2a865dbc0a258906db494085c74b8a5fa0e4b7502a92207 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/ztunnel@sha256:f49d84aead8d4ac4cc83cc10bc0cf8a98915c7a31b8e3050660090ca022357c1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:7c962de4a93f3b343ec185d39f9d1d8488962a8a14cca96ec6ae579c11eae4ea |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:e733bc0c17fae4ff32369423c9e866e881dfae2ceb7bb3c8f98dd373109b4225 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:95e107cc6e67f7d07eeeb601426b92cc362125ddc66a5528d95c3d928f17c8f7 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:42a1be5cae96c003227ab172e259467956ac0c0136d95bcdaa8610464ea22097 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:b17c478546dab02ecd83ed297e11f9513d9798920a9aa2ce5202c6586674bc60 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:08eed1dc003042c0e9208dea06f1d0c605a6f0416c27466fa0f04ef181971b94 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:172f8e628867b908fa50c682bd32f03aaf228ab52b0f4a9e1b7cd90c0fae20e0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:30c48f3b9266123aa3dd6bb0415d641fb2899f568491d94981ef052ae87eb9cc |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:1de48a4dc6665fd708cff39edf06b702afba4c316cac91a3dc537533571bfd89 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:14d169f0cf0faa781cac65153b9237b1a96c333bceda5e325214da2caf1e777c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:a48cd0f66de03e878915353e4d0aa5abdf8360f6ee3484ffdaa95d2ae96c2936 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:f7e714ed15b4dd76af53a099431afad9639173fbb120ddca03be66d5339850a2 |