dhi.io/knative-activator
Knative Serving Activator 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:863a10f5cb73262fea63cb74b913bf5b8c4a5c533ec1dcb082a2bec29b2694a6
Manifest digest:sha256:30131990bda980ac229ac8b4e3a5a46b2ec0308394e59a97bdd05d4cbe57a94a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:8a9e3a274834338fc0d6f8939e6e8fe3ea11e48c8e1f61a5f2069959332eb921 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:00d13dd27b1db2e1abdf4acabcf97e57ad8db308c2eb1dcbdf90d4c7a8e56b16 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:97a9f18a1f68036a55365a3052cbda03652c1f68526998e51f00eb12852befa2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:d0d7b88acb14a1eb6aafd575e1cb82e825e2fbedf2a465a583b0d773063e3765 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-activator@sha256:edefe5f09a0f2c9729beb370193887904f509ddd5d418ab8233ba5859844642b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:8aa6c2f5aa94922c05dd2a22de54565e0bd94164954172d3984572a6c9f4c6a5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:7bc3910b2116adbddaf96ac9f14a93b4def1cfb6143927f1bc74370465b58f2c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:4bad0ffa94cb65dda07e06717715ad2caceea2fcdbe35df74920b5f110692b5c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:8027a0b12f125cd4ad38b6e0f07fe8716922909469a7b659bcf218ec417173bd |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:75f96ca4294e971a55c63a5659181c8a640a29fa5534e79ecb8f05c1774f00e0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:c44a97d0c4ee0024923b3ab1d0ebebdc768490b6b8774e7f43048d5194da54f0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:8a44ac5547367323158f10bf2810dd42061364eda73ed473f637430100dd134c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:c099a8c99a87f5585098061d87b60c04da87903dff48aab089cdae5e842dd148 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:bee16b0470d280f5a1caea1364d7b26dceeabc0cb66d52a83af22600f272296e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:3722686587d387e1e83d5a418270eff32941623d34204997a921e7e3488b53c4 |