dhi.io/knative-activator
Knative Serving Activator 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:52b9843205b1c51a3ee04d4e79e53dc03424efcbc0102be7cb2910dd8c445948
Manifest digest:sha256:a91693269097dae3d56fd9e5b24bd178039984a63fdaa44771bdc74c2843827b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:2c34bf57d24e2d110f395885db623c799c2e16d84f721469a80fb1ec11549392 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:677c1f5da9c50594757cf52203e14413e9cfd192ce05d0139fe08704dd530cdd |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:9795edb08903564ff6def2c43377859f873d905d32e52cea8d0e364bbd450601 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:20765de2e7a697a1b6ac60c7b3bbf17d33ef48a64269574f3da5074bce7221a1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-activator@sha256:468a4ba5d334c8b40db4b6688f8e92e46e01293b2aa189fc501838bc7eac57d0 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:b2f5e8de3ebc83bd3dc2097674091bb0c9155996688a18c293ff5ba06d0e1d76 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:d2b7ec855e7bfdd8d7d810ab500a8e89f8bacee42f49b407d58aaa8972857044 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:a6c2abab2901060b9986a83a9ae84d8afb39d14c94881ecadac1977d05807e4a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:ec8b082d39ba65ca89228b9cd7a35b6b39e099eff7faac00f3929f93610b5f67 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:020d95b2aa6106dba518a7fc8bf137c713e4d04d9381d911d5c988e1de1755f5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:12b8fc69d0134fb1ab63fd36498f919789d21d5aa7034d8689948078dc8946cc |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:edb518daf7f9c967645e0c6c5c0258baf7442d7ba06ac3b1c5919ee3e71b70ef |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:93b0e095908634772788ac6112622d5774900bdefc0ea941285ca8e2fb84d465 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:61aaa0ffb6bd5f7c71caba9c004fe1115bcc8c4e671f3c5e89a12bc3e092b166 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:6cad4ea68e158abf19c97c71e29b362941a80a00bb7c0265813f6cd9bd2cadf6 |