dhi.io/knative-controller
Knative Serving Controller 1.22.x (dev)
1.22-alpine-dev, 1.22-alpine3.24-dev, 1.22.1-alpine-dev, 1.22.1-alpine3.24-dev
sha256:640b92289cb2885dbdc37ae5e4b09edd69ad2a4b6fad92610074c434d2b031a4
Manifest digest:sha256:5c836fd9ea7001b15a39b52a3e9919b34d087fb8bdf8597f8307b0b4936060dd
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:08d688d69b50b743c27a395569d76f48bb11d664d7744224c27638e68520f740 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:5ff408b2f0b3a6d09bf41d7599874e57dbad1be4bd3b34f7291370b1d790a909 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:54319bd41238ed7369437d5b4c202e654cb703a456102f1d40e1b39f25e7fe0a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:87062ce75e0a161b31f6da1bee8caf0689cbec418165b6842b7ef16024bbbdbc |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:8339ce99e6ea37ca130a1b9f9279f6889bc6bb0eaad82e19ccb702b023f56572 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:9cb29c986556047d463973a09251c693aa694335e424479243ad038d57b85b0d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:71cb64df146f54c9d32bb93d6b83325dce34e04a3f8ca5aa955c6f862f0ad07c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:df449573b0ac2de2cf0f1561a26e7a594fd482428b089a38599a4131398f9721 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:57861aa648f0c8f2db354d4b1defff5a235e3100dd4b7a6d3d0d01cf23bc0fc7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:b20aa697757c2eb4bc712304641ba397eba7f63f6112df9766069a943af4af03 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:e71aa77584b1d4841e859798706719c4a8803b50b3e952ef72aec2ec4d0b16b5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:4773720fc60dfedf950359786f73766615c82705f5852fae2b033dc0fefda634 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:a7949ab59939ec712bb6728f74334d3ca3c7afcdfe508fe75d17cf1ca957a96b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:982d2a1c9dbeebad43766a3b175ad7f0822f05a980003c20b9eb1c0398b7b9b9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:c09efca482da196f589e0f216800f37af73bf9c9c8e04d8cf6acce53f3bcc67e |