dhi.io/knative-controller
Knative Serving Controller 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:6fe609c8a285836a531bbf130066b97afb22012eb0e444833ef8998ea2461eef
Manifest digest:sha256:836eeaac02d33817a229fbb4b7ecb178ac7ea61d1a805c8b5796f01019d7cca5
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:bdf2c24d49aac3383cb7382b15adc34aeca1805c70b11b0c78efac45a671c84c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:859cbaa109215b755b956c80afc8c0bbb3be220fd83b66a6620a3bdf83fa08ef |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:e5e64a595d889eb1be7ecb20f2faf31635ac35dc68bc97904701d2815f79e3e3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:50098ab2832e18374ffe94d17b32a101c49148015d0e7e8942f17b23c107b42f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:95d4183d5ed45eb987f6b5d318adf640d5a6eb1ffcd52a86ffb704d56f5b791d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:6040eff6668e7af567a44423822c70c20ba4ce226471a306ae9facd345022f86 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:b9e682779cee0eda6b918c67512e7cebdf0f7b726a62fbf2fdcbe1ae4ed53600 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:cad5fb70605e97f6d2e74a860c0ce6bf785f1ab8ad58cdb702cee1e7cd394ff8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:e177ba53ecd014973e8f59a80bd548679e28f281fd98baf4d58bd5c816eb0af3 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:8f061ff03e13a251983710db301fe05d952557b3f9c90239b73b8c500f096934 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:7a5118c54b678d965a48ae8af7eff37223e6f66db55aad8bcb6bee72073a2950 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:d68e5e13154aba9411f1ec29209462e300585b9770f83130a1574af32ea3181e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:107cc75dd4bce96933dd46275fe629de033faaacdb1f471c3bf42403b0c4b33f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:8dc3700c45e3d05db2c23f0d7b76024f73e572988e049fa37d73f2015fc7cae0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:8ae03a47deac0747cacb3cd252f019647627888c89c17ab0e66473c365ff2ed6 |