dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips, dev)
1.22-alpine-fips-dev, 1.22-alpine3.24-fips-dev, 1.22.1-alpine-fips-dev, 1.22.1-alpine3.24-fips-dev
sha256:5f9dd48450fff10246c86cb49ab20cb2b60b97d0e4c6b43d72d67fafcd2b1ee7
Manifest digest:sha256:c05c02e9d037ae1a7a44f4c3db7c103bb81c0c1110b505c2bd930da0dae36624
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:c29b89efa6cf7bf0f3849e649f451117bb9463ba4e86f7acd75ca763fff767e2 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:8eb2739e0de34b94c25ba55e1599a204b3bb5cca5d03d7170deb91cf3148413c |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:b5da9abce8255ec5609da91cb7a5d57c559dc4d7f8b511406e4caa421915d2e2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:9c02a742f93bdd580174915d4d94378102ec51ee908473a3ca27ef608a4f2194 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:10654e48c7b3d3f778c9fc9908023a1dc644b3b2baf6a726c053fe318fd08686 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:9deb219a9cbd42a7c94e488f26b9b5c3f8fedc9cb122c520c892184e5d7d574f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:5a6c6463384edc9c138af5668085ecb30cb54eff0a92ab96c9f2f087c3f2ef5e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:f4b9fa8e50c42ee2a66a4d1af8e4fb291be0bb4b6e666ec01a44db561de789dc |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:8cff50d3c213853e011898b4226018b45ef15b664a7b0a6bd1df341ab1f63cd6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:aaccd4ac8c1496963543870bece59cd40e67717b8133bb66be8e1549350e404d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:5b8248db1b17b29297ca013d63c58bf163f2d18759c9de70678845c2cca417bf |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:b3e83bab824550e292779a9e9b1dff3fc509a0c3054ade5155bdc28ffac7b8c1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:0d0a882188a10082d5a0eb2346a5acc15f36715c6874a5e33bc7b2da4003c8a2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:2e5cfb2578f2a840c8a5dff87a69f664ff54bd32f260efd1a74a17e2be712a20 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:c0a45eb56e53fbc8d60d28a1b9348f57b6cc635c0b50b67fd8db8799a6ef70bc |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:32b1af1a8f4ddbb77516f37d1f84c4a3265cfb1af7433b69b1d7831aaf42bac1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:73d710718f831ff7bbe710cc05395d88d7ceb57668d881379bf721e3b51829cd |