Sign inSign up
Knative Serving Webhook

dhi.io/knative-webhook

Knative Serving Webhook 1.23.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1.23-alpine-fips-dev, 1.23-alpine3.24-fips-dev, 1.23.0-alpine-fips-dev, 1.23.0-alpine3.24-fips-dev

Index digest:

sha256:1055b5e061caf2dfb544b583c3b5f29264c8d359eb239cb952b516b2424dee1c

Manifest digest:

sha256:8c97944c1a2495129bfe26907bf48489e6bf6f0f18b506216219eb9c75705bac

Size

34.60 MB

Last pushed

9 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active until Feb 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/knative-webhook:1.23-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/knative-webhook:1.23-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/knative-webhook@sha256:a21c748a86357e6f7fb48350fe8714cfe1fe5bb6ec0ef97fd04a5a551286c3de
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/knative-webhook@sha256:f37a2a8c1d37126686a83f7fee7e76d61bb8eae3bd476db5de61d834fa2bf565
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/knative-webhook@sha256:f4ab33b40c76e861c8e62bb3dab16785cd2688f9abf57ac9891c30eb2feba541
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/knative-webhook@sha256:8221c9b48bd9c404d966c6217b5556afad9e556757f955af1dc9822485f401f5
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/knative-webhook@sha256:2c897b6f030709beedcab44ac5104332c2c18eee8abf6cb485db0a1cb62ff269
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/knative-webhook@sha256:2136e6251cf86a63984983f6e59af87979c28aa54322edb113b82bb5b6b8dce8
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/knative-webhook@sha256:bd12318bffd6a3c48193c22a548ac3b782fc19f8044705269de2fa6c2aeaf128
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/knative-webhook@sha256:232fe41009b51adb6de0a5011e0fc1c9414c4dc4afaff5b981fc4312ced42646
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/knative-webhook@sha256:e0c2df09b54be533c230271dfb764e2c34bf4a1ba60a4d00495dff98db43cf39
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/knative-webhook@sha256:475fd98c4d05592eb63fbe2f249b8ac7f0c14e00d612debd4faef62b39cc0527
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/knative-webhook@sha256:6c5d863061d53b646240a820a485740f24663a1c5b55ea54ac5c7d6f272f04d1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/knative-webhook@sha256:3d28288c59d22e8f58aae565c7bcfed00b6835d86853e56cfaf9ab6b495e2bbd
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/knative-webhook@sha256:94bef4e431ceaafb5547e3bc4dda0caf639835844aa3e083754e2d1d5455c2f9
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/knative-webhook@sha256:6508912bf931e60a4c6fa29ecf371e8b5692b2c3ca9d03fb8476b28f6fe7bbfd
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/knative-webhook@sha256:174555494b0b61359ef96a1a01f12402ea09ff13191767516719da07813a8ae1
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/knative-webhook@sha256:e21b4f1572c58ce320de0cd1fe9776c9f5e43ead0326664d7737f11015b0b522
SPDX SBOMhttps://spdx.dev/Documentdhi.io/knative-webhook@sha256:e7b80e14da17840d34752b0b8de5e7738531981973c4405fda8aa331229715ab