dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips, dev)
1.22-alpine-fips-dev, 1.22-alpine3.24-fips-dev, 1.22.1-alpine-fips-dev, 1.22.1-alpine3.24-fips-dev
sha256:7f9b14d7893fadf1e6caa051d3a324555afe1b2c3aee73bcb03352456136aa6b
Manifest digest:sha256:dfa14e93234aca23687092f6481d15e71b74616602c747b48437ea5d583b45c0
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:b23139b5ca4ffe66419cdbe6148f541c916157ee477dc67aadcb855307c88861 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:ea644ab7ec411a5c518aaa3976f663ddded721a9abf3c002b891b3eea12f7ace |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:5b244fac855fa03212d0d984b138d3d0b77440c8e7bcfbc9b17af3db11d33399 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:24fa0f557ef61190511167b095e5da2126b0d17ea2bbcbaac05f0dac45f8c7d7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:fd6733b4100f6506a8b090ad9cdfa6b9807fbea14287a98cdb0b8595409a2bbd |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:3d67893016891c027c9e40e287626587ddb99f4fbd52949bc9f62cb7a578ae65 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:e4ddc5c4a17c898d572f6cec803a213d294c5ba0c87013c4be11f417df38c3c6 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:bae68fcf878343d94d2e6cc509d6430bd73866089739426ac0902b9f8fa78f4e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:abee9313298feb5850e59e04fe1b22050c4c7662a2d6ca2ecbc585a49eb43dbd |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:1ca79099e41354c1fd8eb3bb0ae2c0a6c8f624c870aab1a8125ff5f4c3b02b43 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:bdad759cff0c305ee7dca9fcd44838317c268f5925173e093785054bd1866b52 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:3fa60741015ee4549e69035ccdbb80526036ed347ff18a84fe214e60c4e7d508 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:dbd67d9cab0a7b9e96721a37eb5384679173a4bf87b9dbc3229cc72415fac015 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:7c89928b0059031a2b629cb4c6a3e5e5404cff44337f73b56c8d1de1db31c2c3 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:c6816dda86503126e6a9b5ab3d9068f3ac360571bdc67b0972435916697ba8a8 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:e41e04935ec282e9192ac880331975774762dd23e26bddb79b49378843fdaeae |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:a022f9aa57c4ef71932a160be3ddb9d806b9e7cc49699f0e8a8f9ed695d2ba8e |