dhi.io/knative-controller
Knative Serving Controller 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:ef9b14bbf27fa3810050124efc62130d7e8869c196d3e30222276e661fd81039
Manifest digest:sha256:4e79cc1207e3b440c4bc3fa153d72c4370e790cbed94d58f97da4131c14c45fc
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:666e61f1cc5f97a682228d95cdc8b5e527d2d3fe3db20de27500aa08b31fb229 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:ad50f955e51433f844249fa47954282ec82aba8beae36bea0b58fe41ab0e3e47 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:e03de045f6d9b8ae778d5804fe356892e282c550e716e80be51c3f05798888fa |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:b94aff3e28476b8d50e4f7209238fad6c82c36be3332de38a85f0cb7e97b4e20 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:d0b29ee2356508481fa502699085f538cb97144248083ba57bf21e0384c8d21e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:d65685462b3116fe6f72f61d5217ac88d4f0def8e0cf0f3b09365e90beaf0464 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:a7e5f8da4fca055f9f04bb99f00d4f9f9b019fd64a7cee5e460bb5e060a49ff2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:67fd6afa58272071113545548e61070922f3d1d07a1728efd9f7b0462d92a4f9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:9a474921f2c14dce932bd8b10ea9ec949876788aaf35ade7262bb808700a0aa2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:0ad2212e9fc0955b2c48ef13cb54fe5c776b6845f31e2bebdcd8d14cf21be180 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:ebfcac93c592025b34836b7dd11567669a6ff428d095afce006bd62990f00ced |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:dd21347f92e9a12b66dcebb4ce72dabd44b1625b3aa5f6839296fd1e508d041c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:07c24bf34f72dafc351df65a888511e96db709aea60bbb8e28b569f87742240f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:9b8fd67d0d40d714ee42b073e05e45bb56ba8e2f73b4f62226e9f37218439292 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:a0a7cf109ee94fec9b5adc83e89c18c055d9658ae59e2332047c7378c19794a7 |