dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips)
1.22-debian-fips, 1.22-debian13-fips, 1.22-fips, 1.22.1-debian-fips, 1.22.1-debian13-fips, 1.22.1-fips
sha256:8c4de9412914bda3ec1c8121d0930c3647c0ed7b290f59d8a5aad7f5b96ddf34
Manifest digest:sha256:559ca6598fae15ba1299dc5639650ce9d515ca2e77dcb846d07ecf9547685790
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:8671bc0adc319b61a6e5cb8f942cf8e4ec76e9d634af511968a409c8de7b5ccc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:3987b97143ce19988089b7fb5c43627bf494df3080d369f80952aed0bcb6e952 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:5cb6b3ec75e25fd51d99c0c4bbfe567e8b5eb6f0e90a0af6d64b7a84f9b7155e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:a1527ea7b4556eb4cf18743cb283e29378b3af0cc7614c143d76aa412a926f19 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:4716dea67590e43762775000d70e821d8f2daf4144f8406fbc50cc616ffd0d6b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:bfa9a6bbfc69361233ba1b6b8a3125d9479d78838efce3704fcafe60a8d71634 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:190a4a407553051724361c4d7c9aa8740a8d1b83f05ba4b05c15d84fca7a14ff |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:74557f07a8d8135290cfc146a81fe809d958d497c78b91b06f51857bad2dad01 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:67ecd0389f3e4077d19991dfc4a834ac2d6307079a3bc677a1bf4c08affaa439 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:9229bdd997db5ab915db27d9ac7fe5ac461f3111f5eee546c25abe01f778c165 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:7ed2ba6ddacef7cfabeecf7b48ee7f3292bb0727fdac7b2f51bcd762eaf11f02 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:53eee9317f635343bb9ad34ef51d10b66cb0ba84eea79a0478df2ebae93fd78a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:2d183fcc9c806e3d37060cad0de1d8430b8a06ca48ebe54f90a9d117c3a181a0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:b6f41b97a280d06726cc77e9f003bc85dab596fd49a04adbb95538e70db6f718 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:d86b4d688fe2ae2270673a87d6a13d1fbfcb491ee87faabb34ec238aac51aca6 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:8422a280b67955b56576f1605f017e2cbec70c8027d13d2882303803d5eda425 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:da7a403607bb799bda90ea64e7bcea63088b8f20c2b6e1e79415de6cc073382f |