dhi.io/knative-controller
Knative Serving Controller 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:c165c3232445f948428cd8af1698e5c79e926e197654421d5079378087e0e193
Manifest digest:sha256:93f77a1b2cae4edfecbe06e29c1ed95f319bf716e95ab022f168ce0b7a4b4e17
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:43765f988dc3cb6887c3f120a581585f3184519311a5408db796c4866c169d54 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:1a1a10643a50ffbf3f766d10705f9afd1a9862b995a1c8d165161ff68e8270d2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:d40b9665ec727c8b1e8c951388f0ac14af2f16e975a5f77dfd340f9f7599736e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:c12c7f85922f185666f6dbf51e33b9ae4ef8ffb75e6a7e2c9ca560da5902d4a7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:6c2ca6bd935c804c5c6786a3f3b159d81b6e6ff9dae63177bb9cd329fa6acc67 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:283e78669f6c3e21a2aea8fe49c6c5e11586f6b5d6388a39f09edbff1aba1599 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:d59d1e7d7b133a46d291ff28eb1732ccf086a63a94cc460034fcc2f94f13c795 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:9b3cc77dfc11a1d96d3d0db7b27abc4fe6bcf1c6288cbb1517ecd15425aa9f04 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:e7781906cb7665730a91b667447437506d354ca4db21b25981b282a6f04e4f3d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:7b844711fdd84c7f5e668490ee7d18748a4c913d15d3b1b60033fba27a91ae3d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:9bc701c539151381880b045bbb712c02539f9ad0c657718e5388bea60e026f83 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:43b3319b588deb1e46f6f73897e9c4c188c928e5b97fc537f668b6c093df5939 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:725407f10b9e1b6dc4c5f623bd6a6fa5ff755d2bcc4052ca0e9de2e97debb569 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:33ae1460d8b9d2fd556257a57d9fcbde0d605e6e2e259bb123bbb81fca6797dd |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:9f71e5a4bbe508589def57f21a140b17f70966be2bf4ac371a7d68e58d85132c |