dhi.io/knative-autoscaler
Knative Serving Autoscaler 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:f387b9cc8e83dec44fbd1d05d3fbf9d8b3b70d019761b14966827c97ed94ad74
Manifest digest:sha256:c08ac3795f4f5f6908ed1687e667eb5b80753cb0babe38382323a0f6372e785c
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-autoscaler:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-autoscaler:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-autoscaler@sha256:7a73471f39d2932a07f00ff7fca81a21009316b7bc27ae25107e37374ca4dee9 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-autoscaler@sha256:f5a2cdafe9cf6ac0891fe1acb448278cf58fc37488610d5d2acdbe45672e27e6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-autoscaler@sha256:f8bdaf5379d75bc4f1d9727133178b75f37f1fc23946327315e2c55642f76de3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-autoscaler@sha256:8f4a3387ad6c72bf849e8d3dc24be8f27d2e9bc2d028cd76660585f299f8b482 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-autoscaler@sha256:95eed7d0c69bc49a5e3be34ecdc11398479442483fd2f8fbba89e13e962a64df |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-autoscaler@sha256:328e579df695b5d237012f70c2ea71e07b9149f6382b206b2207f3f20dab6ae1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-autoscaler@sha256:e2bf120e796e06795f3a455b2d96a19ee80a00abc4526498a815cb5fcf6f1180 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-autoscaler@sha256:d09240858c4c9a03eddcd5b347899bd44561f2d21fa15109588072a8abd26ecd |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-autoscaler@sha256:9947181b3ab64cc4e2be3edead59d1bbeefc3d3eeee90a27ec53c765fb32a792 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-autoscaler@sha256:582faea1b8b791dae340ad74f402e05edcf9604a8d7f85f22bea826475bfaf95 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-autoscaler@sha256:32966f8d48d54b164314a175d618229427e90ca8c507f5b564b7597a4176316c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-autoscaler@sha256:8ae1872f00bb514665a8e0c26e47f1e6b1a3801a85f0665fb410818cc570b99c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-autoscaler@sha256:4b33f5670dca8336acc4f6410f8282c28e972f11e1517d1eba5f72fdd8cb94d6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-autoscaler@sha256:171926746be1a82d13994e64eab31cccd6902e1212e0cedb5a7839c0577340ee |