Sign inSign up
Knative Serving Webhook

dhi.io/knative-webhook

Knative Serving Webhook 1.23.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1.23-alpine-fips-dev, 1.23-alpine3.24-fips-dev, 1.23.0-alpine-fips-dev, 1.23.0-alpine3.24-fips-dev

Index digest:

sha256:83ee7306e64d3177e1ecc2f66c04c044389fc3e5afb975c016829fb09024fd44

Manifest digest:

sha256:efad14bb0dfc01a403ff7469d1a4ae095594023b5e3180034212aef6793aafed

Size

34.60 MB

Last pushed

30 minutes ago

Vulnerabilities

0
0
0
0
5

Support

Active until Feb 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/knative-webhook:1.23-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/knative-webhook:1.23-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/knative-webhook@sha256:dcf4852e6d826159426654e07f061f556547e2ff210b272db1222257e64fbdde
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/knative-webhook@sha256:0332171fa8bb048d0bbacec2ef35c4a0258adfbb078d0371827e1dc868cdc94c
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/knative-webhook@sha256:db45dc599505b4a8b1ec801c424cfd07abb716607e525f91183f60fe45c5a8be
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/knative-webhook@sha256:748bbe8e87583b6c9c593f3d1ec794cbfd85a53e208ea2a052e10d8b863ad04f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/knative-webhook@sha256:6e2da8f25978248a8606b342ec09d1c87dc1d2eacb0aa01968135e89f79bd4f1
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/knative-webhook@sha256:14be87332c1c44a98cabd8e026a5313e9571f2dd5d20a0501413584863c26de0
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/knative-webhook@sha256:859b38b13a12b38aaa94e82d115a6c6bdf1758af3b849abb005d9b1ad9bf330f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/knative-webhook@sha256:80c1c08778f0d5a9b20a9ad07fd5a5f1a335cffe4ee2dbf769a1887870eaaf16
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/knative-webhook@sha256:8142937d4b70e814e1615dfa294b965e3f2fce827128b1ceaf748dd8079b84dc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/knative-webhook@sha256:818b83d3c10e737f803883b2a274fcf075793280cb10dc6e8a23659327465da4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/knative-webhook@sha256:cb337df65b9f92764503f1dfb2e6776fd381817f3cc5b326c7ca198d70d72ab6
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/knative-webhook@sha256:db27f0ade8ab391fde45693b039699e041da3645d92d31a9feda8d21aec216f5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/knative-webhook@sha256:a99ceaa4c1311d7816892dea1c4f753a34341732cf9c4b99c0c6693f5ee16423
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/knative-webhook@sha256:af7e8eb982fbb8b9518d83befc39ed654b2ffd849211558f704f6aeebfd767d6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/knative-webhook@sha256:7185c3682f72a127f1f667af92559caf2dae60b6b9029c580c72b3ad6c8e2362
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/knative-webhook@sha256:8b9905715280fd42923378cbb3505d6dcbdf2e0daeb9ea7abb7eb9b7393ad432
SPDX SBOMhttps://spdx.dev/Documentdhi.io/knative-webhook@sha256:d596ab01ef2222df11521eaad0e9c51058769257e8cfcfefb519fcd7708c21e2