Sign inSign up
Linkerd Proxy

dhi.io/linkerd-proxy

Linkerd Proxy 2.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.372-debian-fips-dev, 2.372-debian13-fips-dev, 2.372-fips-dev, 2.372.0-debian-fips-dev, 2.372.0-debian13-fips-dev, 2.372.0-fips-dev, edge-26.11.1-debian-fips-dev, edge-26.11.1-debian13-fips-dev, edge-26.11.1-fips-dev

Index digest:

sha256:ad8993ef0fa2b4984aee1d17aa15345a12dd440e3d8a37c8c01bdde2c157c71f

Manifest digest:

sha256:4681a47080e94dcc9645e9fecaf579ae598555511a335dd2dc1c4d9ed838faf7

Size

41.65 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/linkerd-proxy:2-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/linkerd-proxy:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/linkerd-proxy@sha256:98954618b70a6adb1cd4345520ee2aea69304121ff1d28ac8b30a00eab773a8e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/linkerd-proxy@sha256:7bc3ff76fa090cda9312fa206cca580f792eae9a4827044150a63474064b5acb
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/linkerd-proxy@sha256:ce5fa02bcc9e6688be667928a6c021e6b5b70c8247f8cc159e4148705bdecc52
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/linkerd-proxy@sha256:25650b09049e9541c8a026d6790cc997ec00255b80e0878896c483f91702e1dd
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/linkerd-proxy@sha256:ee2db232472bf171a25b215890ef41f5815be6edc94101d4098e8965c7002759
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/linkerd-proxy@sha256:04796ca9270141cf93349cea9242703cbfca83690fa71eb1c863fdb679b84448
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/linkerd-proxy@sha256:5da097acf4aef4a16673fe9d5fbed2e91a614e694bcddc0a4bb7ad8f9c6de365
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/linkerd-proxy@sha256:4015d47e4ef725fe71900a52ea1ea8b56f5202b3f07ad668f186b5f9763ba59c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/linkerd-proxy@sha256:bd818dba9df4a2333da6969b016d21f3d5cb03bd6ef193efb76ba6b24f91706d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/linkerd-proxy@sha256:41c39daf50864d68d404da6c531820c9d627a439eda3dfe2eec101e7de377552
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/linkerd-proxy@sha256:495e9aabe8d66aaee343c40b8dbe5bc2d4fa41c575ab918c0b72c856e44b220e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/linkerd-proxy@sha256:3e2d7ea2d6fa08307e1a9f1d916e1c4c2232fcaf37e8b515f6184b5c42691077
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/linkerd-proxy@sha256:9fecf499f7e137f59a69f0fc987350507faa7539a59364b86332feca99f5bfc8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/linkerd-proxy@sha256:db503eee0051d072d2c08063467953d9aa07db305fe5ee1311b9025867b9e419
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/linkerd-proxy@sha256:b56e1b347833c2b5df9a06c48d6622ba78d7fad9686d42e80e6954f4c2926e17
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/linkerd-proxy@sha256:dca39a24cf592f472fa5933f366df6e3ff55806c32a60be7038511a3157fb8a2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/linkerd-proxy@sha256:a270c489547f125c697cbcca66e7627f815ff4fba3a651c0d44124bd80aee1ee