dhi.io/knative-activator
Knative Serving Activator 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:91a222b1358fb9bb8b2dc6ead14b5074f190a9c4b5fa4bc5fb749399095f96ef
Manifest digest:sha256:942e30ccd9594ee9b8f9fa783d4abd3f7886b88add3af0222313e96ebccaa934
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:ff987cf6deb4ccb84b0b7bc04ef0d3d3299cc97524c89840dbe1d3f6656fa6df |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:4c5e259d957cf3c6a7b0ae45bf29916c3619872d0d5a4326ac603d69ba277ceb |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:e9881597de57f661c31e46e8030da9315224bb68420e34df1d59bc765903e331 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:5fd4afcf16297f75835ac83bff77399eb5e2d62234b065f9406b296075fd7ab2 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-activator@sha256:b75f249d43efdc2d6077cb36d662acc0eb7500ee153fc1bc5db865eafed12467 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:c54085ce8c134fb598e41c0070895654ee66e027eeca1eb99ede5dbad03d0c20 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:732dc73c148654d9360be1ee71d914597163cbf72329373f66ca50c110e95565 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:2b439f7994a96b9536a9b41f8f86e98ef5167143b54d0e1cfe47eba6a3a4723b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:46eddda3de5de72ffa1ff726128e8ccbf8bdff011a8b0621e6948ea328e39e70 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:ccced3361c96d322f34086029bbc843ad66cf64da656a19e5e7ce6dce4814f29 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:cc809829f0a362fd354e537f69aa6f1885aa570fda679b1acb56d351ea456c3b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:ebfc0a0aa3721a09f282ba626d6d4e7b223eeddca23949095db4d4c3a0fc93d3 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:b6d550e469ff86f7be93262ae3f2109341808ab04aef3338e0d2273307b19c2a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:8831694891a82001b31a2e96d0e2ecf47d5704e43d22ea06025d2599cb4fd1c2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:e2b9df79faac472cbf564cbc0b095e5889b8fc7e38fafa68884035b1c6dae3fc |