dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:bc66c14eaf6e5295867c1f23fc10556bcf07f4642df26f3de3872c908cc2a5b7
Manifest digest:sha256:0d1b78323622c7aaf0cc9112771526dd0978ef0334611585e20a5e742d442fd7
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:a2b5e1765ef8de1f5212f2e846ed69b955f679d08dd51147efb1e241e807168f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:8d2d9dc097353e554867c5542f9532f98676bdb7bb1e1a9bdad2fc86700446c4 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:295a6bba97e1155d50964f0dc07bf6eddabe0d364416d5f9714d4a447aeb2736 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:fde6f82fda5fc8f7c8edd4514a6d478450bf4be09748156e13ff64497163c02e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:41d4d1df40c102e2a2a815c1aa2bb63de8d04a38edd7635aa794e7248a22ec5a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:035f785197aa88e1cadd1caadc78fcc5d8a89592eeaba23a7cb01e945910fa13 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:a7bf18e1b8640aeec479c1d7ba1db2868f1200dbf92b202cdb77d5f337a2ac51 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:5586ddd5f6d3eb393f7fd898f0600160a9cd596bd0798e3003f9f7f69bd93c2a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:4f6eee99dfa2ca835a3fe923541f40d00775d08a27832dab95422c66888c5266 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:a49f9159122f457a0a3503a1224bea0f743046dcd06bf2c809b9d121536cba75 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:3e83cd277dfc1a717950806b06b1f379a6439c1fd1695ae972fc6e77214a4294 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:078c7fe3792cf66ad2fb0893b972a89488065e3b05203fd426e6cd175ef210bb |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:2640d98243cb10a212073a77afaa227e91698a7776b6186c9ac8ca4b0b2fb822 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:7c1b68f78ae2e263c07cf0e53f046b0ce16083a089d4ced7313628ab8a4db4ae |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:d9ef9fce1e4cb00d31e2d086666cc51d2d054f227120c4a96ebe6ae926285bc6 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:a6d357aab2a644af2f93d9e08dde56f8b0a570abd520256785c8a5ab49eb3c35 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:9505a48177499ab281f2df6b35aee9ddecedc4b3d41ec766fd21e3d73f5bd99d |