dhi.io/knative-webhook
Knative Serving Webhook 1.22.x
1.22-alpine, 1.22-alpine3.24, 1.22.1-alpine, 1.22.1-alpine3.24
sha256:e024ffc3bf447396d09d2be3c3a4455eb946101ec7d3af89c2aab3e4e071848d
Manifest digest:sha256:c8d0d021e6f122db7bc883010aeb1def29e32361c5d679bfdc7ff380b1c7a6fa
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-alpine2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-alpine --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:c4bf134b057b11665f0331c187886ebd63f060ffb17c98a4546b38537673d2eb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:458aee7f2d46d0f5de0aa58b8a72808baf75bc4eac19ad14d1270f5af2688864 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:130e27e8846c288bde5d4a1e712c9dd6b841cf5f2c2ec7ead10468e784fde328 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:7b4b10c2115d20821c803da7d6865cad55878d09d933a81ef326a02feeef77cf |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:9069c1821dc832e6e35f1e7ddf8a600ac5c5810b2064dd1e3d544f36e948b856 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:d13af8c9ea5e4ccf18a6acdcf0f82d44edb143163183750305307804adb02596 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:ab012c9c1f5aae5774dca665c8e10e347319f0dd6027c24a224bd7320943afd7 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:1f47508111cfc2e074897b1a1a63a9758c140c828a34faeacc6155165ae7262a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:4109e1b3e477c66070ca57c2ea94efed5ce401fdcb4956103844d82a9de42871 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:6e66f32e665f8873f0baabb90df2a42b0754f4f7e396a1313c8a30a1680fa178 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:79a5709fd6536addbc18c2edd06231da47c75d065f44c8ae9033a04ea27f2510 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:94c3003c4225a87a8314dfcbf354a9f48a8f83a8bce3c045488fee494117fe7e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:ab41eece2853972cbccc3c4cc6fe00c557026dbb5a2b91c72c5456410e8b1166 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:3fb1212554e6d5c037dcc657684782ca0e4065dff9010d835eca46652c49f475 |