dhi.io/ztunnel
Istio Ztunnel 1.30.x (fips, dev)
1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.6-debian-fips-dev, 1.30.6-debian13-fips-dev, 1.30.6-fips-dev
sha256:25065608b13cd68dda419aaf6e9a9263f0251057812183117e686f4533a4c543
Manifest digest:sha256:fac94fd17d141447614c9748b7eb971db7ffa6aa1f16738ba9c2834253425c56
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.30-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:821209fdbbd614f27f784173e0466595f3153ce1fd12e72687c221694949a292 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:4caf89228e90bb12be87b22370965523b8e0f635276e6dd7b675d9fdffbbbdfa |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/ztunnel@sha256:977099ec86f45cf7f0c1c438a7a653531316b4686cabb42fedeea2f73c4a3ef9 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:2996bbcc93268022caa85c09f40f886e9b8bb34e90956af5090558e41cea395d |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/ztunnel@sha256:6a3ddd384a43afd814d3015527ccabb4a10070c5ea4198f95cb1e10205636b32 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:f96be4cdf5b31277cf74346b485522d839d3995a38e1f576d53b2707cda9776d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:a3a8f5e02ff043564cb42b3878ac9007fa0e1cc65493182319526a3967aa537d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:9dd831c30c517d5d528902ebfbe2bc7e808fa38a695b5295e775db509018ddc8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:5880b275cb4edba9dc664632b4d2ac2fcc3808cb1657c5110f5ada856bb73768 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:84a26ad3dd55cc592646701f27ecb9b3ce062eada001d683a58fd0ec18f5a295 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:84beaf9eeba23e354816418831a1c6cb426b57ba7369edc20e37a9bc891cab72 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:d5dd02f4bce991d7f2bc9c301413266e33c3cb56018981835b7c74b8c9762ae7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:0e14f8926a977fbe07e73a0f6f0b4e8fc94989a7538d09580e3283e25141910d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:31dae02a12f14fd7051eddfe01082cb8841d06bc9bc89ffc100ccc96e811c9b0 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:d2966c318e606d372228cf8f0fd18f26ecad875eb1d826bea884829c8cd5e1a2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:1862cc5667f63c7d0aac9032e8ecb5f1dcef21956d5d46fb1d8108ce35426d36 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:2142c3b583a97df5165deb8eea162ddf1dd0c30618967d8c5d1205375dbdb8ae |