dhi.io/knative-controller
Knative Serving Controller 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:03b5feabc647fccd6836c38a7fc336c45a2f83adcf096b3f393e82e0fca3d1b4
Manifest digest:sha256:74230b1c1b60ea31b283aeb16a14185d2baa7f87578a360b0845dc76c66ca1c7
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:affe72aac8ef7c65898aa13c69239223e98d12d69f450bbc74eb7797892e6f78 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:1acb3e7da34ef58a2e13f5f42bb6687abee2cce2c9cea080ef1ff7995222628b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:92a68fe16dee1a94ed6d516b1a8da3ad743259c057fee28197ca8a2d933f9efb |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:6070aa0cbf1ad130cf9e8e9776e8d303810db267b8bf290d4829daf2dacd297f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:61d1e255c33dfaecbc35a83b84c8ad1101ce6c0b6e1d5edd9d59df4c0dd3535a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:334d3886cd823c3487f5e7181d408e6b526259ee6959792c8aa038bc7b1fea50 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:3832e924f93c7723bd52bd8cb9880e965b8fafeaaad0f0d7e0d43e8ad317ab57 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:dfcc3ac84b89e187a1080d2c6c1eed8bcf1c29086a62e8c3d7acaffc8b5cbe77 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:dfe628d71625085c0252bd8c13578172ccf01508868a6f8d9ab6e221091962b1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:b1097ec77ac3ffaa9c98f1c177415e9bfd9680815f1bba9f6cefcc18e1e6e71b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:7b1005b658b0f9dbd5b9ad059c59e3b5d1bea1dc022cc3ddd7b4f0d849362441 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:0c3d1adc8402d8fbb7a46570a656054d9d9f01d1c3e65f7568aa774e8ad83eac |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:701370f77e35cac1723a6dbcfc64f33362c208baf8ecf9df60f15f8e3eff50de |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:d8124cdaa880949680eff7535b024ec89f2d63e427b194938a97da5728bc9897 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:6a63ba36289ad7f59fa85f79860f5e534f2366150ef1ce068cda120c952e136c |