dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:c8d4ac445f0c1967b4458476d0995e9363fd74be53741ac07a85d1deefea6f7d
Manifest digest:sha256:a2e93563166124987a546c8a06a19a597b2e88f2f2e8250f2260db2f790eaa1b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:10b7d592bad2510e095be08d73e75f28d6a3df3075ea138ff907cd9219213710 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:fa9a053ffa9677b2c2e32b0f59d8b5c6752eed7a9875f3fb7520aa15ca441901 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:169325f80fdcbd6d04bfd39d026c396e23dc47f4b72b9aac0534334963eb1d1f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:1ceddf6623ebfa56abd76483bfe61bc277b6e2dec2bdfe208f2337939cee7310 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:6e8a717e229c86f3888ca185a8ea09e523311c5e54ed3b48313838e00b5390a2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:d00bc5aac5b9b4a3f23ed6fb657ff9e01193c70ff5a9bce9262a52d9031e586b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:eb128b0c3aa1f7aff39c44aced1253cf7e326215cfebe6ab259e4875c664859f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:d11d357ec7981898959c468d632a1a46e0d1d2bb39fc98f9be4de7faef3fb360 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:934ab7295ae26581ff5bad09737c3dbd2c66b3a932b064aba7c990407cbbe91a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:4b6dd131faeabf269aa7f885263e0f9b895005d82a22f0a544ea7ef170401161 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:6608902e790de6501c171778b3f65ceb0614b356c1fd8cd56c33cbf6c58de893 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:ab18a0bfa24fc16c3e1c33e5550f70217a036013b30e1fc9cdcf57e030e98445 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:af327946f0974a405e2024452e0d92788424c81a3cd5e2a059bf7189595a2c5a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:c22111678d86eaa7d104af3db43a816226af0bc0fde0e41bc0c3fb9a1d26445c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:fcbb2ae6bd08f718639e958ee7aabe371d77be2c3fa69c7504d2314ddd199916 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:03374e1b882568082493595898222693014275c6346713066baed49f7527240e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:3214fa59dc42156b5522227d472e96c13a9081d545a96703f6835fe9b8e71968 |