dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (dev)
1.22-alpine-dev, 1.22-alpine3.24-dev, 1.22.1-alpine-dev, 1.22.1-alpine3.24-dev
sha256:02453642630e17554b9ef7a01874ef119c4374c3f1b8be93e57fb54a4894f226
Manifest digest:sha256:67d7293206f20eaf88f3ce45e9dfb648996d8064c0fafaefcba32899d602148f
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:8b58d323460e66ce00ac19035b0ddbf37eaa47b06bc13be504d71b3bec62a6c5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:a0ed8ed41dc6678121a26a4f38547bbd37e5bd3752adcfd5a2d5259a2cedf3ea |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:4172fb0efd784722a2320fa442a490f7301b6e0356b68681745177abf8415e0d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:1ce8c9347b027f4a48e0f25e5bfb24d1d71d3ace6ca9f1994d55ca5163fb5a4d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:ff1105caa6306031ac4e8bb5831d7457d881b9800a1273452bd931469ffe3d74 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:a78738ff71fda47189da2935dbba06acfaad77efd76c8ddbaafd735d2e409b50 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:5d54e86426ea32dae9f3a86c7c591d8174cf29c31108380892c2a331fa77dd04 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:f02bda4c01bd4b3e5465b57121ad0fcf97a19c9a719949f907029e61273f96a2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:23b7931ca25d67e1041791b29a95486d3a079d7100965e6c6aab29e47ead7380 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:938c2df0661baad9f43f35e4b96691e9723e4bed4fa8178bfa08f457a4595bd5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:a5ebedebb988db31cae054d0cc8e4433a43a03ed59187a2d301e6200d1010cd8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:73987b3e5fd91771b3de00e1cb18974c1a7ad88506292ceeeece66bcee96c7af |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:e4e00959f1eef79ec1f72c61255e8191d0b6e985a7d0dc6b4544b6e09be23d52 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:b37fd98f61973934cb0689a6c8d0a116f4435512698bde31e3386e1a51f9801c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:36da1d78d985116080fa949bcab2ce73eea8807446d1918856010bde38f443b7 |