dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:553cb2c03318bb65a25f324b523ff008fbc49f0832b4d7cd365849d922f36148
Manifest digest:sha256:4c35b236d39fa4e82207ddc5ffd4976f2ddccdb689152809f1e24bad885dc91f
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:f44ba120c503de9e8f2e1b13d09f60402c30e982b6a6505e4f6dbf7fed235ef0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:592706abfd3a8a1f553661d8100ac3101114f1aa5c6e4fc5a01df99931649b02 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:4c1c6efd1d264c2903edbaa5f9f2e47ecc19821cedf7b0ebd39ad8f32d229b43 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:06d4012f802e48ce9620ec6eb2bfa3b16f9effd88ad215b256a263d81dc4cc60 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:28e5ccebd8022cfc37bccc308999611e5f511b026a5edc9106e2d436815d2b76 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:372baa902d270bf01c7a962af0027347b123dcdfb94aa8070fae034495c80e80 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:4a3e0b16729084e195163dbeb6adeff97b1169b4ce195754d5885e48e0a49bca |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:dee1fe28db2964995cbcf72f55bb08f841344408a2dfd819317ad900a3b31a6d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:2101d2de60bd06874ac00a145ddd394fb66adc0c6cc01f613a89989cd08e4ea4 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:632255a8779d96dfdce98cf283630ec2952d30e9bf0bafeb8a5c1b00da8ab118 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:7da6223ddb0269d02b4ffaf25a893f159cd3d7754229464af73a62c3f3b8685f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:98eba1608eef23a17719306dc7b803a5d0381c9ff80809bcb814679462dda753 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:6877e226a09ca5a4efbe14757872f5abd99f4cfad5a0fc5cab2d659351994fcf |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:30ecdcdc7f98c0129fe74230f7ee3d966ee9edfd5c3dd1ecabc111ef099673e7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:8f24e452e72039dd069a73ade0460cc608c0a618404722120295e1b8d3a137f1 |