dhi.io/knative-controller
Knative Serving Controller 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:e3c07409f3e3003007990f716513b70b4cac63c58d51ad16afe7fa9f5335682d
Manifest digest:sha256:4ce8a717b855c4997d78e707f648b21ecdbbadd5c2206e31a76ab9b468a2bd54
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:dc81fc91af6ae1ba7412fc51487fa9633f2cca236d22dd7f3694b11dc9cc8527 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:39b6157df8408b4beddc2bea05ff71a6281f24a219cea6e6ffdb11a80ce44150 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:b69794f970fec812bf1c8d87665262d128e43245aef817976f3fbc55ad53abca |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:ea21ea7020f2f2e625e29733f776bb45e1dc1d29a3b259eaef906f68aedc2708 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:108f03f81ba8eec9cdbe842c0e6a6377f83318bb091ba3a4ecf3c8da09dd5ff7 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:f69cec22388602c9685dac43e70423e61d820bd90a408d07441c98de5fe0e331 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:8ccee3dcb73268f28fa169052efbc82f11fc9bdf93ad2387d91f02c8b2addcbb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:5b79646da651e94c8aa38994cd7aaed7216a9a55350fc4918d326cc02f8f8c46 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:08eaf824311da90bda35ce26a2a8b2d933fe15aadbca36ad26ca5a1b37c1ddfb |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:b9924342024b14ab50f9e11cc5e1cc592790938b65c5a42b5107761a5aa63ab9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:ce768cc174665b5cfa70f6704a0560da6dc4f3e0a72d20bad26cac9f061a7497 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:b48e4ac759910d0a20d5d4be1fb8541f48799ae7cb68d5d4263482d380f32c5f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:09a612a722d0481929c317f9c65e319641c90f1c3c4d21ba71701d2d9c42cbbc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:01e7b4a6a62c366ef788ee48322e8d80b451dc6e4e1d5b33434d894df5e6e663 |