dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:19f06dd3a6eb0b50f7026bc5c6d344be7c85759fd9a8124dbbffc172bcb1d40f
Manifest digest:sha256:62d2e36ac6d2aecdb8714adea4d5a38eef6cc1091504fbd3d9e8b89f6ef161d4
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:54cff53efe52585cc227b18a637ae2e939e7a0f35187c27d4abd72bebb5ab41f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:f976e93c5813adddeb70937005405f5f129ae3b837509b2e41ae061aa13d6446 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:e6044548f41bc578fbcae3d6d441a3aa09b7a51b795cb71e824f274f9da9625a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:d0debdd528c07ce64142a884e7fed8b1d07d169bc9ba17d9c6b2f5640dc6f885 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:7176dbd1123ec458ce909a7b22c0b9150cf6819c87b0b56fa5713c5f5d599746 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:b1512976d86f3e3a5a0f83461d693b5f10dbad67d60c3b098902dfc7a9f0f6f0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:194747c6483b59e04b71f6d7daaa5e2a7506a040ee7bcac921b743f47ba21227 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:50bd45182922b0fbd173afe5b09d511e1a914979bedc7556654e8ea5edfa61f6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:304b3ebd5a5feaba07cc92df7bf021c3a4976800b46bbe558b5e6e60e8d310a4 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:f0d0d53116313107470848edf3729467204d50812cee50922891bd9aee68e694 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:c2b374380c07baf5e6acc1fb17140d090b854f0cc910282468378289fe730502 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:91d6d66589e8b32e1a752c0bef9073fa2594f46b29ca1f862ef5b8e16df43429 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:12709672acb43cb5fb8def49c5fd84737adaf30f999ce210894983acdfae2e2d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:fc24d88fc2925c72f188f071e4ee00c67ffb778155dbb5225d2a9bcc1c86acbc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:56d0baac06dcbac601c00264f13eb9a51667420c81d025337508b825c0babf7d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:9cbb88fb4083934f13658c1f527722a91d9f43c508915231b65fb7417252a6c2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:0d6e29b1b65e4d8bbcb8aab9201433bbbb264aa7f5e738f620f527e667b0a2a4 |