dhi.io/knative-webhook
Knative Serving Webhook 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:be619cb8d45a545cbf4dae1f11adb69c5b5cdbaae25382ce1139ef1556c17d9e
Manifest digest:sha256:b022594dd8fb088429f4708f121286cfebfead883d54f8efe0c7f8aedd9784a1
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:cee5473eb763133c3963a86dfd0460363049be66d290827f0985cb9284b3e08d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:0d337506635ef21bbd06f1e14a7e1295688a065005ad9c636730d9af2cf17981 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:b414c399046eccd3cd27a1fca9541c9b43f4e5fa680e6621a6d3a6d48dd08c23 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:4f8b0fcf27d6e94041e66e99b3201cd616bbb5edb1f6e20541d1beacad8abb32 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:3064bf32b3c576476550cbd928085cead578d0d6c3b9b57d492aa9c3f5af2f45 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:30585e616dfedcff89fe4d61588053d07e40ccd54cd2f081faf7942e466dfdb1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:27f557f0d407a96dcfdb8f08f12bead19311e548089e86791625009b3aee3ee4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:b21c5231865ce19c602d2790539f1e884cb0be17c3aa25270abb7dbe2d58ef00 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:ff590f71285e7c12ab3423face159fe92be3b382813e8d4e1fce96669304aeb8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:36686edb3ed0b13533c24e48a294660752cb3608d17499a26672c94867442b2e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:3a42a2a0d2bdde8f4744eaa00f76e6758ce0956a2178cc1876bb1de4727dade4 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:d0e948894bc8624924c640b69f38dfb54418a076ef953dfb70c3de7485365004 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:f4b65441774cd25c444d5384b350cccf956fcbd60ed398826adb64728db67de8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:f4f263fb4c10fcf8651e0a1dbdacdbc69fde53cde0f4398e2ff3bd9d4978213f |