dhi.io/knative-activator
Knative Serving Activator 1.22.x (fips, dev)
1.22-alpine-fips-dev, 1.22-alpine3.24-fips-dev, 1.22.1-alpine-fips-dev, 1.22.1-alpine3.24-fips-dev
sha256:7cc9b104426ae65c8bd8380ea2424d215c3af480a60d720135a00440715c8e27
Manifest digest:sha256:dc97e85d009ce0773e8a7c4c020172d27a75f77e55a033a6810a17de91bd53c9
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.22-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:a4be09f546435d2e1e002883509e6403891ffc84fdfb1275c2463f3daf641fc3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:17a8edb71a3c285c5d3ad8a8215d4aeff2a11c5b228c711315c9986cccd817cf |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-activator@sha256:e7027bbb172c8bd4382ac29d531153b7e2c1d12797b28371c8245a083e201990 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:2c9e7e5e75f5d9e140a1860c7e3b35a26f322d0a1dbe2a2c56b20e23dd52ba54 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-activator@sha256:be3fcfaf469f00f0e54858c485e94669899f90ba7de0337e61435a932bfc5bfa |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:14a9940d4c7bcfcb6f67ead759856b3dbd125f5a2c910dea808dc1c6f28140fe |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-activator@sha256:da4fd8ec70e3130f70b8f038ae413eed20e96d390e20c2ba78d50b67836c5a52 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:7a2e83312c03544584adad965f0f9af323ae9ebc6e632533c6f22a6db81dcd83 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:01cd292d8d2d62b48b6ffe08c3bd366326bc90b6c3b918532e065607a82357c8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:9ec711a1c72c402a306da5aca62c455374dc35786989b016c5fb359fab9eefc9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:bae9230900ca95d3507c2003942840c60ce0a9afb4f070f64ffbcb2cd209a8ef |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:25dd173758ed203ec23e8e9a5e0359c0128e4577531767866d9af14a1b8da757 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:fb04d9e76dd6c2aab695509a1fc1629e093a1744c652a0af3f0a4e0b1ab73c62 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:a16253c56c1fa7e81c6379e6f94def08b905d8013c1aab793cd7f89c4cb43d3b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:de5090d1eaf6042bae9bc929f12f756f949180580d0c5c6323299e6faf67ea56 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:ab04746a60d2e8978d1d7eb1fe7642f0badd76a535d53adb93f8325adb3096ef |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:719b114e89aeedef5fda4330f5b93c34e33a3fefe4290f7991413a42d1ad8875 |