dhi.io/knative-controller
Knative Serving Controller 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:3e7cbf5a2e58101fc18968d32a44ea9e80341a708f1e541054d6c845941390cb
Manifest digest:sha256:fd915c5cacaa290b777c370890b9b355ccb1ee9b7c167288dbac13e590b3d780
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:9023fdd6f1882aa182af160a18ba9b048476bfe01f4879d101d417d75de734e4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:39b7af6d3d26dca164dc0cfbe6fa8099b107f44d394d605c14e490a1192bc959 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:504cfdab9b54940c983ba374d74368ac50579c4f31c388e0a55772e0565395ee |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:91c5ae392fe4a1b2bf2c91c83a67c44258fa219528cba0a3d0c25a3e86623857 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:9b42b8778f546c54ebd5d1ecfbf2514cd0181cdf947d1715513791c8cf35b6e9 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:1eefccc278f0dae3259f6eb591205f54ddace0d13a2cfbf542e8fc005226636b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:7670b429c0725df3a6d207dab5976bae10ab92cd7642f094c4531f714a65f3c2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:e4970191c1dcaf35edd5187a59c1032d2b0d9f47a7829469edb5b6664f2d9c32 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:581e99baddc6583c6e286ae16159c5b87f671284d96d09d3f0b6fd4d685f651f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:ffbabd5940010fe871aa345be8dc7ad56f57cafe918d52079ee614b944fb758a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:e95151e30044261f2d59400b040d347072ce3ec4a1d79babb006dbe4dddd15e3 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:aca03c8feecf9e977190182141f90a25886013044429ec3cb01d212ba4acec19 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:236f73c19c23788f9d6938a0030858933b87c5b7f54a0944b9bc2a6ae2c2d43d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:16054bfd7d09813e5e4e71bd338e98eadf632447f0c78dac37402f7baa19213d |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:17b9f1e45cac118130abb6424b109185bc2221bd2179a8960fe8c6c8e4cee8ce |