dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips)
1.22-debian-fips, 1.22-debian13-fips, 1.22-fips, 1.22.1-debian-fips, 1.22.1-debian13-fips, 1.22.1-fips
sha256:a21d157537c6e738a7fcf52dc71dd3514e1d24bd7ee1c5165075ab781f4b4712
Manifest digest:sha256:d9fc5f7cdbd751ddfdf1b74d65c6d071b3b8f58a8936073a09a1846c2962025b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:91ffd9b8984f41cfb6acf42678547f4e56bcc4306452e73079f70a10a2a700b3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:47977959fed54f780acf80c5bb27432bf5de2b8ed1e29be15b1b740e45f22536 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:e877b229f8c25bba41fa96a763a7cfe3115a13d126c4f0fc7d68776d7d951685 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:d59e298e003c86ebfe2364466db150c166f6ba626cf66ecedbf9c5899457b774 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:6599c6c8838a1af7dfd7e65338c5357a87bd066ead77e6e786ddbb6a152f29fc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:e35599b505115c0fb78c7a004b93481b381d6037d86afd30d54278ad3ea0b58f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:bd0fd5e49fcd3f58786f022eac5fa543eda12d69d2d63b16e619da00a786ca99 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:96be3fbe95084d49e2f27892229bb43726885c90aebeb39520845adc16c1cf38 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:c6347971957118dbb2b1fb7e36e7924defcfc1bbef72d9d7eccd86f90cf8f352 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:f5fa5596af28f8e6e2d698a66820d51a91d2ca0a3bbd3dffc31a63886e0148a5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:3c6302bcb06ba4ebce7560507da87dca2509d17dacb2f199bbfda71ee13d5e2f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:aa39c658a1b4dc9dec64dacd5d583883aa12d867dee04ce823f548266e5ada84 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:2791b0addc9cb7130e8ef2d47fabf253c0ec30e8d8acca98c22842056a6cd2f6 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:8fdd4867d393b0f2558b2c6341f7b3881a8f15641ba2c92c40cee6174fab77c5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:4d328e75c5f4b6b27fd7f343baebaa2b24deb7bf5533eb31dd4d4a655b783f71 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:9afae0bba5c0d37e0166180c59571bcf2c6f5767b53fe58ae8765241cf10b848 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:6ef9ba582d9ca6569cbf0c27d60f48ab5697093353d43c7f26daea6d2c31e350 |