dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:095ebaaad5539d36a37bcd9d3e80a7eda2886cf1a79887bb327162a76bd9d533
Manifest digest:sha256:835505c36b9163ff2973fa473e5d57a79324f70a381523f70b8c5b791cfbb072
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:46f94c3602570b78840b124d6cce8e0f776e80985ae06491c701713a526287d7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:6ae76282cbff1b78d6bf3b9132238b4a203223da086fa41071cfa2e146385b2a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:6ec3e89cececafc3f7d504c32c563d9a9612261f1f29819618d28a6159020de8 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:9d6c7c36c18db581033b0e7a6797450e5201b3f417f9047d27953144b48cfb48 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:19d7191ef5899ad257b8f71d3f568ac7356de800f7433ea23989d2d5274e9504 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:365837ee402b0f323514968a230f24461c8c7d2d23a37ee93a2e8648b3fa27c2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:156efa16c48dc49ca5adf1322e8ffa50cad57150ea0cf04788010449cb8f68d5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:a6a7f34f320e5a9c775c7d324d9d636be7ffbc7f7372feed0af66e57136612f3 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:bddfde59cef4659669861d781d322ea1843197e961d6b720b0cad4a0b0a6f040 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:b65eeb46a1e7a19783b9e0af1c4f66d963fed54d11733652c6bdf929c1037780 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:b90854584f80d9ac68e5fb710db061eadcef51ce1d22509d5c80f1deaa153dcc |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:1a2158da2d7d6ac4d8ef3035b6af390a59a3b6c29f481ee80a5d560a0ab630c4 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:52e16c8f0fe6a8a3593e13a3aab17427df94a74d43e567329da913f607abcd42 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:5796fcd957c6d0efd74a6ca16345535c4133ada11a5ea831bac32e167280e10c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:b6b96308f71e5f76994a16f4b16787d70d4b920a361bf581423bd5365a0b7a44 |