Sign inSign up
Knative Serving Webhook

dhi.io/knative-webhook

Knative Serving Webhook 1.23.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1-alpine-fips, 1-alpine3.24-fips, 1.23-alpine-fips, 1.23-alpine3.24-fips, 1.23.0-alpine-fips, 1.23.0-alpine3.24-fips

Index digest:

sha256:18bfd9672dad01429ed8aa26157be498899cec0c9b7695559bcfdf988826ec65

Manifest digest:

sha256:c7f9571960a68285d44625bdb7ac2bb143a6e462efe6a0b67174e005ae831dd0

Size

18.10 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
0
0

Support

Active until Feb 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/knative-webhook:1-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/knative-webhook:1-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/knative-webhook@sha256:e0b06f0f677c559047ce25b96bacf1d2374166205eb949ce6896a436d45075cc
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/knative-webhook@sha256:3205858af32ec77e1438e17f2db572fc90c45bf6a0c9fbf274a79cc49d1f3dc1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/knative-webhook@sha256:f19bd23ce63f58687a202615f05908d267fc839e712a2f900c466ccb0cd3237d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/knative-webhook@sha256:a4e28c3fbc36dfaf7a49154ee2d37641533451d7a7d7351ec89c1159cc6a80a9
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/knative-webhook@sha256:932adff4d04c73ea29a902917bf5f51d9b07ba614f4108930667d3ff877d1c1e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/knative-webhook@sha256:c6db5c6e3fc9e14d2b1259bab0526227b3e80bfd557ffa604717fdc274aecdb4
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/knative-webhook@sha256:851409b962ad664a3d6fa9326540b7a4c946b472f5bc19c8488ab9aa776e001b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/knative-webhook@sha256:5891e39764a22aa3443c8ddbd9917e0a8bd6a7194c4d3aabb7b537a9f7e3d48b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/knative-webhook@sha256:33c502257f9510531c34f20fce615b0aa1f5dfa5eac3729609633bdf4255518e
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/knative-webhook@sha256:8743194567af00c025abaa8530eb583f1a8a96ae83673fa3e506f33efe3bdfc0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/knative-webhook@sha256:8cc4915b1d6500a7650d31d3220c6d75fe21a3cb34c379b7ae183dfe175d653b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/knative-webhook@sha256:9839097c2591456ad2a48871c291dd3488eeca05261f51e72de5561a8aecd68d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/knative-webhook@sha256:688ae9a85561b05ccdc44b051235e59bf83358a84cffd1d0d9700cbd85857725
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/knative-webhook@sha256:8d06e53dda8d88923d11bf3103bbdd162f9fa1cde4b00650de169abeed1a7a98
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/knative-webhook@sha256:a7afcbd3f2d86274c7e63185e60716aa87da7abdc982906c4aa7ec2970230329
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/knative-webhook@sha256:bb894480cc2f5a0ef34320be56530e56cbdb9ca3be5222a828aa2e0a1b5fb83a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/knative-webhook@sha256:65b57529201ef09781025181103e79cda8d219f8774c8ff7efd0031725210513