dhi.io/ztunnel
Istio Ztunnel 1.30.x (fips)
1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.6-debian-fips, 1.30.6-debian13-fips, 1.30.6-fips
sha256:ae5537078e986a51dd70bb5c6abff55f18f9e5e0a16a9b3b63baa6a9bdfead84
Manifest digest:sha256:1b4cde6f4669c240dcd16adf0a623c958fb4ca3c1cf185cd754b9c3ff3181df5
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/ztunnel:1.30-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ztunnel:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ztunnel@sha256:77eca9b05df9f357f0e21c2f08b1e8629612748fe426e8e833fd0b2b7653de6e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ztunnel@sha256:55989b4cdf52763e3891d129f34456fd88287ac32aae03e33a23e70edb3da3a1 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/ztunnel@sha256:fa463bb3a8263063e8ae30329d2550ceb156b1414fc67f76dfdd34d0bc840c88 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ztunnel@sha256:6b3d4278dee5b1da6c1dcd1da2dfbc470c29e25ce668f37c4362c4ab1c98dcbf |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/ztunnel@sha256:98db629d4208a019fda087cdd568353c40a93c02921563b11a0acadf36b3273f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ztunnel@sha256:f5bb66dcae58361b8c136564dedf429451fa72fd334d1d4a1c0d842bdbea787b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ztunnel@sha256:914ef47c6df3b2cffd6847faf5fbde9284bee559996756e642f87768bb885a2e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ztunnel@sha256:7713d77bad4cf865d6c0581c4a988515e2a7a9a55c95d9ac3012ecb86455e622 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ztunnel@sha256:b5bc1d3a3e89b972dd37524ad75bd5499d7e1590d3780aae2a1ba50490d0d1ac |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ztunnel@sha256:fb81972366589f414e0ce2195a5e6d9839b1ff391df52d28efa2c2b8f2101e8c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ztunnel@sha256:4b19a4a50440e2b3fdd975795adbfdb003df758e87b7a910a82ab2fad5e0bac7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ztunnel@sha256:3600a25ede6234298e1caa481967ace99e35440619e2ac8b9ffd9124e414d381 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ztunnel@sha256:4dfb31dcd087a846ae30da0adaf5b2878b4f599e36d19d43c16d36e7e1457198 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ztunnel@sha256:0b6663143203f00f14652b05c2ded134eebcf19a15ce10519e4ef44047725c89 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ztunnel@sha256:dae374fcaf73dea4360841cc09e6d9b28f861d0ffdf3b255a21b6f36e0e092ad |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ztunnel@sha256:0b87eca5758a0e4d3f354f0a46f05faa3dedde7853cd2a3ebd8e148852758d0c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ztunnel@sha256:a99d68114d021e5233dbed11f70aeae1c19b4d0213a9d195daffebc57acc62ce |