Sign inSign up
Knative Serving Autoscaler

dhi.io/knative-autoscaler

Knative Serving Autoscaler 1.23.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1.23-alpine-fips, 1.23-alpine3.24-fips, 1.23.0-alpine-fips, 1.23.0-alpine3.24-fips

Index digest:

sha256:13b747a01d46489ffcd0a91ab86a4e479e5d100f43a999a80b99934e56533d7d

Manifest digest:

sha256:2754b2594040111585d806561e374ad8551a3a96d05b4a4aef0b92b12047ad53

Size

18.11 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
0
5

Support

Active until Feb 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/knative-autoscaler:1.23-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/knative-autoscaler:1.23-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/knative-autoscaler@sha256:a3ef8b4382038e606ec554e4e9060d1a49cd45f3a1ecd277557f2b6b077a5a2b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/knative-autoscaler@sha256:0fac25509f043259ee3a98e20a610b7ed0562568b4594ddb95b955113eb069cd
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/knative-autoscaler@sha256:0fda9686d95ae5b18937a99d9af4b5852cfa26aaadcd2c427c9ffda85e90bbbc
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/knative-autoscaler@sha256:3680cfea87a64be20e4a43c7c111e0e4ba0c478c1e14781059a9996615bf19ca
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/knative-autoscaler@sha256:0e0c594d2124705d1fdfd002fbbdd6990be8ed9338bdfa4de96ae4df953c165f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/knative-autoscaler@sha256:7afdd8a23d9d6411a9528c97cb55f0cf2de8bfe14fca5a927259ea6e8752d8f6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/knative-autoscaler@sha256:cc88fb825bd1dd57a61c1f3bdf83ed6e9b09a2011aa8254b9a8dfae998def03f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/knative-autoscaler@sha256:0a90f269b8ef06925626aac2d198765e61759d50b6baaf74d6f0ed2acf093c44
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/knative-autoscaler@sha256:096b7ed662fcefcf1a718b48c895a746a7e6fa1f966535402685e3161258fd3c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/knative-autoscaler@sha256:5cc8ee8b0c83d9af24f283f3b338fa64a8e773f81258877ae5fb88766fbb40fc
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/knative-autoscaler@sha256:3f895c3f6853e70a70b2e0a4dd99aa9fbdcea64dd3196c0d9f3b2b4cef249ae0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/knative-autoscaler@sha256:1bc759dc446de9d96e0f6b671c41c208c6f51d9c85f919266f13a49a995053c3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/knative-autoscaler@sha256:a1915e88370a5c4814170b7af8136d95f8b3cbcf44a5a6af500456025f66048a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/knative-autoscaler@sha256:996127693a6d64bcbfa265977b314cfd7605f274d647657e887633123272840b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/knative-autoscaler@sha256:05270b15468039c2019f63d7d205391dbfd05e004d24729a7fe3082069cc94be
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/knative-autoscaler@sha256:4eb6337c43d1d5c603fd3633caa687a15d8c635fee7290d4a1e1eed9ae5b40c1
SPDX SBOMhttps://spdx.dev/Documentdhi.io/knative-autoscaler@sha256:0f4b287f78c2d29aea07b0505dff05d4a0a88a6fe3b0a9bf13b3bde11f1aab5b