dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips)
1.22-debian-fips, 1.22-debian13-fips, 1.22-fips, 1.22.1-debian-fips, 1.22.1-debian13-fips, 1.22.1-fips
sha256:f9a22a8c5c8a48ef9bd838fbb398de9a0a3b24d4c1ac808ded8f49893dcd3b84
Manifest digest:sha256:e3322fbd3c5a0209cdbad040a67bfabf6022f08f4555987106d2e85561315086
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:bfacddbcca7ffc3300846acf12079220b4704282948034ff40a4166672bb6ea3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:5bb9cc2a45752ea0d181b37202100595cf68241c3826e02f87868e29cbd66b06 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:03bfe4d62313445b78fa91c9e6ff2689bb84b6e13638132bc8debb2087e057c4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:cbae0b41eb4795276872eb8a2411c72f6a09eb21712018898e974c04576161b0 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:e70278f05b2dc76a1f9ef72ab527bc7f239d996df805b5998ce50764fb1ecb79 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:b67824e63c15042f03b2d9dcfc4142835847d7dae8457700de7fa19c031c6e24 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:96ef05fcf7734f41d6046ead9ff41ec4abe9181da20bde9b6184fe3daddd5362 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:cf11297b0ec055f956733121ace46f7fcdf8b83e000d5f854d1f8f74a36934ae |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:12fc327395fd5a53d28f94729b073b9af970bea974af6caed39c09e1e7a139f3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:69ead6e1333cb2ac8defa29e8e19b765905f37fb8e71e917af743c74b49852ad |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:1c92a06752dcf0fd3c500b97dd67c0535d97bac82ef23a631b6941da19f2adcb |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:40178b9b1eb6d6581f0f32ebfb1d302b1718b9c0a6ba2c86e2395f2f422cfb51 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:736a1f30e99f0b574324a7f951f88701fb8e17aeb470ae3eb6b3f1223ce56c49 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:02c8c2e9af69dd69cb3399c602e5033eb532786e2784e73904d3e9b255b81b44 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:10403f2c165fa2ca0b599e5b3cf6e56174e007314f3ee88ed83eecc92f74512f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:e40f98f91a52385fe0fd5fd122cd2f2ff9533bdef20ff7c31326a2423c958b52 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:4ff5564b910f6bba98b7c06f0fb2222c7ff9161b5091c13967f5b1531ef76828 |