dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:86123322de84dab4eaee9f7bf89f3df45d63e68741d94e5f306bd30b2e3b9d89
Manifest digest:sha256:f0332c7635b9ea01b41d8621995b0e81267c24437466e08b6f6c02305f6545d9
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:d55caf4def94d939a6889d6da6466043973ab8a0611ffb48ded63b5862fc5e78 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:7691cee5d35a5395807d0e3e0b78c9be626102cf27271e501ad98b4014c54fc6 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:9fedc0328d400e5284c66e15b0b75545de921011dfcb6fdb7cab022b74028845 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:2dd3b7ed18fa68ce1225fbb42ad9231f54d959adce795f2808adbeef48e39c90 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:485c09e135325d7fb1979156b93cb9b43d1cd8dce471afde7b2079cb34370713 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:57ae717ae62840d67300709208f03e34c9f3a826f1c574cf7a194ddb0a258f47 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:92bedd8eef26911ecda343bf9f1712b16f11d49b825900afedabd59f2e4b3722 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:c577f30aab9e6b6d9f50426fad37c1cb91ed13a6d2dff17721625f8d9c259723 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:a6f4c2adee95fabb3f01f7b323975b9edfda3031d618c67000247ae9d686726f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:050121c8c616d1b3d25602b08ffedc72fd4f7dc07f1f0f6bcbfd5cb13c346419 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:6723fa4778a9bb92f486f8c9a0ccebdea440821b5b1168dc4e833b9c1f22df6b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:6ac52737ff85eff2203ed9d5de29b6339b6cbb50e5f9fb910140241742602e17 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:795b648f6d8f72c160b0b14ddb4d05dd2bbd9c2eff9040104500d24960fdd028 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:d24351144482ec09888cf24d3bc775de9d58ee5ede1f7bcd6d05d995660f31d9 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:1460c255999911d930ffad726bc29b1fae18fe7939cafd00a38353d8a25f35af |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:37e89438af1a6d23bb9d4ac88eda814ff4d070974617ad6b23e9f143db30d1f9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:57a4dac7b971b903ccca4c751776d60d87375e948d835f1d35842155fb85e14e |