dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:d452ba3f2e6ae96061a8ae1cd983105f600d962bd2dff078ddf148cb2543b46a
Manifest digest:sha256:b35fbc9dd4abf577dc31f2700708e719b64696cd9b1a4ca3aa47d2e404337ff7
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:5aba97794d36ef572c0e81cb5fddbf07d77b197991745650d10193b6ac0eb79b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:461d1f62bddf2c22b9221166a9556379dac52ea389c9963bf87d00db7958187e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:df5982bacbb51d6ae11179057e561ec8d032d33e35d2923d27380e4ec426ddbb |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:e7f872c0f9bf0da64050c7a5b513d4ea3cb0313542fb37dc14155f5d3c039ea6 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:b2a751b8340e8d003ab2d0614c1135a70e68ae8472a18f0a69c4159719e7c249 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:b29011a0e7c95fffcf131c91af5af5cb968a249d6f70355cb774e53826f9c220 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:328246d9f5c6fa935d36cbce48359bbed69be5fbe18c76983721db923b503a50 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:f2481fa1496149674c8cd3927cea8bf5f3daac065524689b03ba94e561dbfec3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:da126f7e98c8293dc5b07ecc1b89df69b1a0c911c03562ac5fe27e5d2c4471d1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:715f8ff139026a43c06d24f90665a32082bc225cd3fd1e082efe8a441dc082fa |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:78084cf59053820463155a00bfeb2a7488b6c779e23fabc8c68aefa72e868edc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:dff13c89490ca3b790b6f8a2805edd84050d644f39eb8eb212b0348912e0d82b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:9574793f7f2ec1de0b00cb5cacb25481f6316ad5d97425528e9a0d0d896ff63a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:7ddcdc37836a371b294e336507aa461d1be5f5eb9aa57d911b64117ebf248cac |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:3ee36c6bee0e9854322d6cdec9ef028165f0007eec8a1356d2452564aab6fca2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:ba58a81ed3116db41b4cf0c6a25682d5339a9a55c67903fe1dc39e09a36dc906 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:babd350acb7ca2de7811c6ebb14cd24d0727779830a9e35cba4b392d144d2721 |