dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips, dev)
1.22-alpine-fips-dev, 1.22-alpine3.24-fips-dev, 1.22.1-alpine-fips-dev, 1.22.1-alpine3.24-fips-dev
sha256:0bed99732c185264163984e4ffbf788fa036f26586b533c148dff44d5bfccdc8
Manifest digest:sha256:36ff04aeaec683f33c13f2530e908e640eea3a7675eb149f93a6fa8430c79236
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:44c1a32eca2ca6bc17e5f8748aee384c23e4ed3a7131a13d28df07b30a41ae47 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:23ea7be69c1e6baf9c53ffe610760fd6575a8541a786a1f0bec5b1490d11ec2f |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:37179c4a3f89f8273379e533d35e82e1c1f08cc96304d3abb224d07868b3effe |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:6e62ed266156186045f30f771e08cdcb4f28023ec886f59644afffd37cc08fc7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:d642d29d33f90db5733a341bc35fc172c6e7f6745b4f68bfb93cf1a687164e04 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:dfce5384e080431197813ae346d3a18240456181220d00428eec50e160a5e564 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:a318b0f5f2628e73aaefb90a243e8b5862d80cd424fd23a305a36fd71965407d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:2c9d191e918d57d78318a04a0e7e700caecab9bcc687556df3fe2d225357a746 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:cb4c9420491fa0e3fb9086c21b3c881e9bd5a4e2769e9ab279da3fd665b818f2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:8cbc684d169edeba7c7b9982ad8c879931e04e39423265ff82a88160bb91d766 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:ddd3c1a026894033e8b07a8839761ecc09ee4b22974d6eb1f43c23882b670e30 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:9f5d02517bc79d0a02af48ffe5e4b3022b9381c4c0ba92b9159d17048c4977d4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:e8a721ed69ea779cf487f5b7b4e694209b45ef0907db09592d3ef80379a185d6 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:5421be1c303490ca875ec21a57fdfafdc44ad498d2721936dd50b909359bd4eb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:abf1141b7ad7b418c38563e48f357bbe9bc28aade2d5e6acb71f33cd01c6ccd4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:b444803097c9492a98e67ab73823c5d9bd72490febaf8aa542d28603435fc8ae |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:970d6cfc50b8f22dd05971865afaf2e22ff7e3c5aab4afc22fbe122dabec7e02 |