dhi.io/knative-autoscaler
Knative Serving Autoscaler 1.22.x
1.22-alpine, 1.22-alpine3.24, 1.22.1-alpine, 1.22.1-alpine3.24
sha256:aeb8c1bed9a6085c8cee97490f8280907fe4cb4d73099ef3d75dd82b49114406
Manifest digest:sha256:3bba8225c7000a05b1df26b2f25d02cd4bf27f772ae17ccb433f7b4a1844d481
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-autoscaler:1.22-alpine2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-autoscaler:1.22-alpine --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-autoscaler@sha256:e90dd070871fadc443ca5522bc5ddfcf3e50fc967a065e5de3e94e02eabab485 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-autoscaler@sha256:8a22013048a9edf26311e98d1206fa5df3d21169419c9558a99884ff01c808c0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-autoscaler@sha256:fd16ca63853dc2ef2eaba2a53ae23b7432024afc008f33a035425fffb9f566bc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-autoscaler@sha256:ccd94e3d6fb4af2587d54a33b0d17e8f39e6c98702541bba3fc42e533231b453 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-autoscaler@sha256:4e2ded9e6d3550885698a318b5a1c54ca32b6242776ccb824ddc098b4c98177d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-autoscaler@sha256:1ab3c0b4eeb5f41eaef1c8642416dae859150ed3f3b1454fa479f731dae4ec54 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-autoscaler@sha256:b0cafb2218f7096f1e8d462ff1601dc19556c77e20646fbddf3ce8e2b71afded |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-autoscaler@sha256:3a69c356b487ace1bd6d2a9302a51f5d6288f0941c4658262ea7be4d059a5ea0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-autoscaler@sha256:ea225385c0166b80f7f3926f7b0bf4d26c0d4220e2f2d7c49dd323749f6bdc23 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-autoscaler@sha256:dfb8ab8a62b4f5122f081feb48fcec0a7e5a40dbf57f2a511f6f5b0f51664a04 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-autoscaler@sha256:c0034dca844261b326dd77ec641b3f499f55f2a73703cb35c48f430df839abde |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-autoscaler@sha256:4a5d6fa6b89ca665422bc9e59cb038538a38bdc34678a937c9b0924ef223e0c0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-autoscaler@sha256:ac4eb2c740644702df3dcab57b4937c4e91c6599983a58a837f5567bfbe9ccfd |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-autoscaler@sha256:d2c671a153d6e7069dbb4abc76bd2bf705f0c16f87ed33298f7ac98e1a4b59a7 |