dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:bacd5561f8813a42ae71c3f89f4238b64bf6798c3617cdcf04ccd5bf9b5556b2
Manifest digest:sha256:ef16be1a8e37297f02eb17414c76e958b6ed617f9eba4020025bec9576a3652d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:dfc52b44eb3d615d043e9c0e30270c18cda329fb65ee77723aca5b29c24d34d4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:5c8e9ff486f1d9caa7d2fbde9bbb1616192827eb61dc7c4560b341172445fb68 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:a4a6fa0d5d51e240291f8a955a3822f35af4ae18a8771192eb29c5f48d564d73 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:1959e3f5072c9b8a99617fb4eec15595946fcb505c64601377405e66e862b13a |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:af8d2c29419b96518dea895f1d74e27bfa29696bf41b53dccba1953a7c2cf36d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:be7b594276b4c971152d15d44cbbab4658089011564c3d63d422b859ee0e3c40 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:3ee8e54537cca8dd40d01c26ada25c194eb4be0a766fbb4dafb5fb9192221f18 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:ab051903e4446e4e1ec2dc8a696c1f6f75b5d473f6339f79764fc8d3c6b9a8f3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:751ed4515ad2347735e594e2e34db194493521ef385e7a77846ca7640dd7d676 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:caff6484bf9ff015bd4230f5c85821653580d84b2eab28579f76d91ff784093c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:d87bf14c7b536613b4606d3d07729bb059d71b744db6f0a38842c49da0e883ed |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:340004931da7d1948f5316d17bec703a7f65949a56dd8f757271b9717e82ea31 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:23a0dfff96fae7bcb08a32e38c6a3baba28cc0712b5211a015c07304cd64fa44 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:05ce9f4f8da5fe229612b5e7c6f5e50edd6365e2e20652db4c31520e0207e287 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:2faccb806eeaf766467c31500af2e6fe4e3bd802f5149bc75bbb62fc935fbe3b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:9c079d9ef056117167c49ae2b8746c86bd3b77108f1708cdd79bd2951f6b27dc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:805ce4f69f1b80a238bfce257d5c642efe0987830be66922b4ec03135343e6a0 |