dhi: add sla redirect (#24553)

<!--Delete sections as needed -->

## Description

GA rewrites URLs for cross domain tracking, which breaks docker.com pdf
links
Workaround to create a redirect that will prevent GA from rewriting.

## Related issues or tickets

<!-- Related issues, pull requests, or Jira tickets -->

## Reviews

<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->

- [ ] Editorial review

---------

Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>

Author: craig-osterhout

content/manuals/dhi/core-concepts/cves.md

@@ -41,7 +41,7 @@ CVE mitigation:
   95% smaller than traditional images, limits the number of potential
   vulnerabilities, making it harder for attackers to exploit unneeded software.
 
-- Faster CVE remediation: Maintained by Docker with an [enterprise-grade SLA](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf),
+- Faster CVE remediation: Maintained by Docker with an [enterprise-grade SLA](https://docs.docker.com/go/dhi-sla/),
   DHIs are continuously updated to address known vulnerabilities. Critical and
   high-severity CVEs are patched quickly, ensuring that your containers remain
   secure without manual intervention.

content/manuals/dhi/core-concepts/sscs.md

@@ -48,5 +48,5 @@ following features:
 
 - Continuous maintenance and rapid CVE remediation: Docker maintains DHIs with
   regular updates and security patches, backed by an [SLA for addressing critical
-  and high-severity vulnerabilities](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf). This proactive approach helps ensure that
+  and high-severity vulnerabilities](https://docs.docker.com/go/dhi-sla/). This proactive approach helps ensure that
   images remain secure and compliant with enterprise standards.

content/manuals/dhi/explore/build-process.md

@@ -14,7 +14,7 @@ This page explains the build process for both base DHI images and customized
 images available with DHI Select and DHI Enterprise subscriptions.
 
 With DHI Select or DHI Enterprise subscriptions, the automated security update pipeline for
-both base and customized images is backed by [SLA commitments](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf), including a 7-day
+both base and customized images is backed by [SLA commitments](https://docs.docker.com/go/dhi-sla/), including a 7-day
 SLA for critical and high severity vulnerabilities. DHI Community offers a secure baseline
 but no guaranteed remediation timelines.
 
@@ -132,7 +132,7 @@ components from source rather than waiting for packaged updates, Docker can
 patch critical and high severity CVEs within days of upstream fixes and publish
 updated images with new attestations. For DHI Enterprise subscriptions, this
 rapid response is backed by a [7-day SLA for critical and high severity
-vulnerabilities](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf).
+vulnerabilities](https://docs.docker.com/go/dhi-sla/).
 
 The following diagram shows the base image build flow:
 

content/manuals/dhi/explore/responsibility.md

@@ -39,7 +39,7 @@ securely.
   including fixing vulnerabilities in libraries and dependencies.
 - Docker: Rebuilds and re-releases images with upstream patches applied. Docker
   monitors for vulnerabilities and publishes updates to affected images. DHI Select
-  and DHI Enterprise include [SLA commitments](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf). DHI Community offers a secure baseline but no
+  and DHI Enterprise include [SLA commitments](https://docs.docker.com/go/dhi-sla/). DHI Community offers a secure baseline but no
   guaranteed remediation timelines.
 - You: Apply DHI updates in your environments and patch any software or
   dependencies you install on top of the base image.

content/manuals/dhi/explore/what.md

@@ -91,7 +91,7 @@ maintained so you don't have to. They offer:
 
 
 - Images built for peace of mind: Ultra-minimal and distroless, DHIs eliminate up to 95% of the traditional container attack surface.
-- No more patch panic: With continuous CVE scanning and [SLA-backed remediation](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf), Docker helps you stay ahead of threats.
+- No more patch panic: With continuous CVE scanning and [SLA-backed remediation](https://docs.docker.com/go/dhi-sla/), Docker helps you stay ahead of threats.
 - Audit-ready images: All DHIs include signed SBOMs, VEX, and provenance that support security and compliance workflows.
 - Images that work with your stack: Available in Alpine and Debian flavors, DHIs drop into your existing Dockerfiles and pipelines.
 - Images backed by enterprise support: Get peace of mind with Docker's support and rapid response to critical vulnerabilities.

content/manuals/dhi/features.md

@@ -122,7 +122,7 @@ comparison](https://www.docker.com/products/hardened-images/#compare).
 - Continuous patching: Regular security updates backed by SLA commitments
 - Enterprise support: Access to Docker's support team for mission-critical applications
 
-For complete details, see the [Support Service Level Agreement](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf).
+For complete details, see the [Support Service Level Agreement](https://docs.docker.com/go/dhi-sla/).
 
 ### Compliance variants {tier="DHI Select & DHI Enterprise"}
 

content/manuals/dhi/how-to/mirror.md

@@ -16,7 +16,7 @@ mirroring. With a DHI Select or Enterprise subscription, you must mirror to get:
 - Extended Lifecycle Support (ELS) variants (requires add-on)
 - Image or Helm chart customization
 - Air-gapped or restricted network environments
-- [SLA-backed security updates](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf)
+- [SLA-backed security updates](https://docs.docker.com/go/dhi-sla/)
 
 ## How to mirror
 

content/manuals/dhi/resources.md

@@ -70,7 +70,7 @@ organization:
 - [Start a free trial](https://hub.docker.com/hardened-images/start-free-trial):
   Explore DHI Select and Enterprise features including FIPS/STIG variants, customization,
   and SLA-backed support
-- [Support Service Level Agreement](https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf):
+- [Support Service Level Agreement](https://docs.docker.com/go/dhi-sla/):
   Review the SLA commitments for DHI Select and Enterprise subscriptions
 - [Request a demo](https://www.docker.com/products/hardened-images/#getstarted): Get a
   personalized demo and information about DHI Select and Enterprise subscriptions

data/redirects.yml

@@ -402,6 +402,11 @@
 "/dhi/how-to/customize/#create-an-oci-artifact-image":
   - /go/dhi-customization-artifacts/
 
+"https://www.docker.com/static/support-service-level-agreement-for-dhi.pdf":
+  # External redirect to DHI Support SLA PDF. Internal redirect prevents GA4
+  # from adding _gl cross-domain tracking parameters that break the PDF link.
+  - /go/dhi-sla/
+
 # Copilot extension (deprecated)
 "https://github.com/marketplace/docker-for-github-copilot":
   - /copilot/