dhi.io/knative-controller
Knative Serving Controller 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:e72eee9661c8fffc8e4cdd1647973aca0c567610d621f8cff9d0acd0f9244a28
Manifest digest:sha256:a5ebedc33cfbc1aa01053a8a4702f31ecbabb965f4a16fe76c2591e56b3349cf
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:e229141a7692801632af4d897129f8a6e5d68c917c52cf114fe2fd248e45931c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:f95b309ca62bfef7ec5f0a4503d7b1050ac291211c1372177cbaed2645fda030 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:be77daec3f88f71fced98dc17250e618201bd0d8b8069abd495a4abe358933b7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:116f0504c15df6d97eb76cb262d7c564d5897f033c81157a5c1053ee310a149f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:0a910c91730818a8fc1de9b71c9718402962e00166c85bc9446417dd823d9a1c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:2f01b00042340b8d9644d03e6dcae5cac2be150297419d9e3dae641be39cc828 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:919255c10f8418a45f0648ca36f64dfa5fc999e759f21016e3b855035b052df1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:4169a6f8349dbf8e4f45e17fcf135b375484ae571989f686965d4c63fc2c98e8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:f751db5633b24bc43a81b8f63a9fcb1583e230869322137952477f7671db8657 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:7b8519f263cb7b19794379ed86acdd1802a8d5cd3a3f4a6439dbc12bdb812086 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:46bd5a0826feb8cd7810a347497698cca944a0dbe2f322a88b211060efb47fe2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:a41cec8743d6dcf39608f1429d1b442dd0ba74ce4b39c8067699d1b71fcf89ca |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:3468c066e18c80f1b864c6de4283038fd0ea7973946fa59251ad2f184f5996cc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:fcd5a938ec2be4e15cbff6f0f83e00e2112d036203a353e85396341a745e90b0 |