dhi.io/ztunnel
Istio Ztunnel 1.29.x (fips)
1.29-debian-fips, 1.29-debian13-fips, 1.29-fips, 1.29.9-debian-fips, 1.29.9-debian13-fips, 1.29.9-fips
sha256:b0a166d3707766f1eedcc9e084f4d35d81ea39d7f4ae9e11ee5b1bc097301ba5
Manifest digest:sha256:e3332ada9d320dca241fc627d06880590fa938fe9a0004cc86069c24fafda9ca
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.29-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.29-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:cf6e7ff9c62e0e551659f3da64a64bc368c48b58dde749c3854b99f5a0424131 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:b10b3b26dc4f288cd2e0937016bdcb60fd09a3aac1c944619386d9252845ae85 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/ztunnel@sha256:03ea0ac232002f421b7e6f8764a873bbfee6dc53440433b5f1421d7a6a12d5e1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:f01f2569effac3291adcdb9a67da58b37bd11a0f3bf572b3c8d646c17fab37ec |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/ztunnel@sha256:d0862893ca07dc776a6ec4166f8e6a95d4d06056af1c342ddb2d1c9a792855a8 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:b2030b1dcd9d66e8941b14b3391e28662ee0be09d8825616ef20222cb670cffb |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:dedc6111e4c5d469530ba24b526351545f937a821c38302ff101ace307d3c1b8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:b51ec1fc99ea4dfd575729cedfe59e8948dfe831c65861eb0c081a61197751d9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:a8b82cc126f08c1abf9eb031b57535aeb319f78a2c5fbd82534eab9ba189ac74 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:0489e1ccd9af90a5024af24325b09b65a67882c62b821ded1404ceea4974a375 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:893edd162a34303b432bdbab6a459093c04079166aa515516a6e145ff9e1b188 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:03273e45346576eab04f05158eae7e969fa4e3a2ceb49a42251befba8c5e5db5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:e6d2833152fd5e685c1df01502f3c4d2e91a0be47a87046b15ae350c032b0a33 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:3930582b4011e158b2f7827a12394623e901b4dbc5b4440437971d51a163e0c3 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:182faae4653d8a716c9f000ec76530754085a345e7830ff5d4a8c8bf624b0555 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:d23212d1b400a596c6a80436d9ef19c7a0b219a594e6b6870b6d86c13d9cf1f2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:d62a78159d6ebc317514944cc3e3cf4f039c4975ab75ca868a172056c4b50d68 |