Sign inSign up
Knative Serving Activator

dhi.io/knative-activator

Knative Serving Activator 1.23.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1.23-alpine-fips, 1.23-alpine3.24-fips, 1.23.0-alpine-fips, 1.23.0-alpine3.24-fips

Index digest:

sha256:97ac3a783dbd28dec24e323c93075bbda9f55cb1fcb09c87248f358d91a88dab

Manifest digest:

sha256:83a0cde4cb2efd425a8b6c97e4e72a60fd531f93529d560a9df7f82bc7bb9119

Size

18.09 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
0
5

Support

Active until Feb 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/knative-activator:1.23-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/knative-activator:1.23-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/knative-activator@sha256:bc1cf921c7df08d7dab8c57fe5e52162a2aaec432affe1f385cede65499a7d9a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/knative-activator@sha256:a876b5b2e5568242b00e2a389597634b9633207d830ab3f24fa199d05372b2c2
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/knative-activator@sha256:7f871c48469f5553635bb7859311e0d2ddd055dcdcae1e88001e2833f1d9c7f9
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/knative-activator@sha256:278c95c16595475eb5937f50082e3e3e25baa0660c7a8fbcd3261d0f5487d271
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/knative-activator@sha256:e274a95eab766e5b8c023d201dc30cb329f0749512b2c64696335a30dc108b4c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/knative-activator@sha256:499ba4e2ae32559d58c3a777140583be2043dca234c2b6b465a73d11a609b00b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/knative-activator@sha256:24d30e29483036ddc57069d853ee9e5e01e1d08e32c59f0e868953786e66607c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/knative-activator@sha256:6a4d36108a2f1ae54cd8d9500c05eca37666c6217abb240afe3a861fb25f7f80
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/knative-activator@sha256:b8d5002781365187e4cad85826a2b0ba8b6021085f57a37ec9d7442ce81ab9ca
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/knative-activator@sha256:4055e763a6cc3451d7e7d2e900819c8b6a7b3acde7c28dd1b0f5a80d35aede46
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/knative-activator@sha256:9ca00474f82f67daa5d5b1ab172f0a2bacb457c79752b25db81ce9c049bc53c7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/knative-activator@sha256:c843e00973bbea3c65f73917b843e8c15f5b40e37aa6f64cfe11295f1f9eeecf
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/knative-activator@sha256:9847b3d572a333f4ed9451970c79c0db90d3c1a1416490bdc3d0dad4603bb06e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/knative-activator@sha256:b73374f5ffe722beeea0358d60d9af267165a591040995291e7ddd52cd7c85ca
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/knative-activator@sha256:01de88a0ec8295484afb30d51d7c1e338a8116ebba54fe9559e0799ec6f2d076
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/knative-activator@sha256:289e7d205bbeb07352cfdbf977d1a5079eeada8aefa29fe3e1b4154394a0079f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/knative-activator@sha256:b98449c885e84f34b3f90626fb437b5e9d34c1b50def604aa75734376c0ae5ab