dhi.io/istio-pilot
Istio Pilot 1.29.x
1.29, 1.29-debian, 1.29-debian13, 1.29.10, 1.29.10-debian, 1.29.10-debian13
sha256:dfbfa44893970490c29074023b120d6c8d32f9bfe7cbbdc7367aba4e9d5a8bef
Manifest digest:sha256:60950702e1b4d6a24581e5d39e2236fa365a776b7231fd76b7f4670e890ddfed
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/istio-pilot:1.292. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/istio-pilot:1.29 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/istio-pilot@sha256:3f6600291be87ab4ea83c62e6b98baa2bc850c3e563a4334f3b88fd188c3aac6 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/istio-pilot@sha256:28fe246b08749cc8cf9c02a8e174c91fa0d0de91ef922bb481377e473ea3660b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/istio-pilot@sha256:35a9efb87c64df5fa9ca12b8a9ee055ee9d180e48db6ae838561b0e62ce7c2fa |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/istio-pilot@sha256:fe6b9ce61b552f47b4841514aee47cc864b83e9fa6f9b4c970bb45e91c462e57 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/istio-pilot@sha256:65fb0f4119c40c2cce15ee062bfd06568d4e85281cef6f82bba29cc1fb8f414d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/istio-pilot@sha256:046b1b0a58e6f1605aa60c5a9b0f2f5fde5245573ac119827c7490bd1e5897f0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/istio-pilot@sha256:dea45597316dcaf46f447587bc936cb0449d9ecba7e1025d14d590782ed31528 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/istio-pilot@sha256:4ba0d1ef0e60bb804f823d388dbcd0299bd1e2d878acbe2bce7bd8f16606f272 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/istio-pilot@sha256:09217f4a4d8397b6c384d8b8db4fb689b3566d491bcbab143672578e0ae58bb2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/istio-pilot@sha256:2539d3d975ee338486e0024cdf913a5e7135ae3374a0883e9508b0c6915fb082 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/istio-pilot@sha256:d352a5760dfc02debb29355dc86246fc5ac6e052c63265127f38cb26051d9943 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/istio-pilot@sha256:33ddf9ef2ec7537adeff4ea9069706344c3765159214c1fb0c4a4fac84dd6e6c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/istio-pilot@sha256:d66b1d6a0c776f6a52ce4be3a85491e8f1f6a1b1497b4dd140e1a9a5559b2d96 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/istio-pilot@sha256:592bf3fad2fc812c55cea242a2db3bff25a58dae0f1dae2d4127924a65403213 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/istio-pilot@sha256:94d0a3e57c52f84ee3e30402290a3f8ad05d973e071759644cd270b690927767 |