Sign inSign up
Knative Serving Webhook

dhi.io/knative-webhook

Knative Serving Webhook 1.23.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.23-debian-fips, 1.23-debian13-fips, 1.23-fips, 1.23.0-debian-fips, 1.23.0-debian13-fips, 1.23.0-fips

Index digest:

sha256:c0a165995deb0bf927a4f005ea0b288a9c96923725d3c3d01ece594a49fb09c6

Manifest digest:

sha256:94abc254e90482d868c474d25b6506ebfa883d9d979dddb8567d3ffbe3e8710d

Size

23.27 MB

Last pushed

11 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active until Feb 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/knative-webhook:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/knative-webhook:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/knative-webhook@sha256:dc9ba2f4f532d1643cf63fe08f543f066f37d9a8274a325a1175f2e8add7fdcb
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/knative-webhook@sha256:8ecce8045fce9dd2fe7f9eb6944ac3f2e4503530f40f435db62553e908a25ad6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/knative-webhook@sha256:34b00ccb7bd3e2bff95b66060c2d8fae21a3a7d210a73070f0cb4cea99b817c7
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/knative-webhook@sha256:d04d50d2023a8b7841415f9d29c5e6eddd3f7c7c844deed1cded61f4018d70e5
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/knative-webhook@sha256:92439a36b10a80f6b0dc184bfd80dde46d38a56b9c8993c8fe411fda4e119470
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/knative-webhook@sha256:765b8adc476af647f04c48ace148c5eb90fa1a846efb35d864adb4a3a7da492d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/knative-webhook@sha256:e1e52758dc1c9a11ad2ecbba1d64d252c279ff4c5737bba74195b7d199b08708
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/knative-webhook@sha256:3a05dbea124cadb98ff12456b4dbb9ced3161b042946d4015ac2bee65f5b83d2
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/knative-webhook@sha256:2be166c7b1293bbeda26f027230d3e3a596cfefed1d2f86c7cf73ab370f0c20e
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/knative-webhook@sha256:6a85e88fe929a5b54a2ddfc7e326399373cf280167c40e1946392b4e97769c29
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/knative-webhook@sha256:bfdb0660c4555ec98763bb703c9b88fa2d696ea88625c23f365a5461cd4a13b8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/knative-webhook@sha256:e1b088e2b259c565a5c18b96ee4579710f9bdaaa31e4ecc72dabd60833f2324d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/knative-webhook@sha256:349ff0ec975dee81f3e76954ee977ccf24935cbac575642dd39730cdda3ce3d7
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/knative-webhook@sha256:d70bfb6921e5d5495a91394a1a39891238d38cc41729248862b0d07636c78ff8
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/knative-webhook@sha256:6d120927f0200612b1d09f8fc5d4de742bf12e7b745180a0887688419ae3c101
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/knative-webhook@sha256:14c7cb068e5ea27f820d370e7a12bbcf1b7a97e106d153415e7a29bd3bd24235
SPDX SBOMhttps://spdx.dev/Documentdhi.io/knative-webhook@sha256:3d96bff0bd1ed0527dbbdc045f40ad9e625144702184984f4bec050ce6ed406d