dhi.io/knative-activator
Knative Serving Activator 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:af3189ba8e9697574ca792593066fe2caa5b91f8104951a0083596c42823d855
Manifest digest:sha256:671d11edca01f91e8b20d3f3bbc9efeef034741521bd5e0626f0a9dcfbfee058
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:5e07d9fb498cab722a78124b7f093f817974b3bf00f0ac564448f2bb32f2aca4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:8ef0730a9a4c60ef4ee80605caed541df6aa4ac4b5577049ae01ab95c446587b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:94da107c8c8397449f0f6c6c98135214ecefeda1d51ef9734d693b86e72934cb |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:c39ec50612c2ca6b01af5c9e2a0adc3d226712b9c8ee09dd100911888b570e03 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-activator@sha256:fe8aa4cac775cb67a6ff5e9c56f4a832894118399953e7ac56de780fcb27948f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:c7ec245bd2410a9366711bb514b7cb143ceaf25826c494a87b9c742f30c16813 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:4f954f417b8fbab48f5a094ffa9e057c3e03e70b571012f5fe07512af219cd4e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:15996ad13904242980d8e16822c4a08bc8a4834746587117ab03eefb34010ac3 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:ce1795edfcfdace9ea99d3a02d42e5abf91066945afff74f5d07bb01c6be35e6 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:c84165999e395fca0487a6ffce92e3f06321bfde5fa9883ecffce16aeb12f7b1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:27398ee56cb74a5e69633a22ee4e35a2092194be83227daab0068ffb7bfad8a0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:e670d57a8a445ff513b95d83ad46360b242e09c7a45882359ee7e882e55a61f7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:97ec3909408ae12f622db7b41accd69563aaf6ba62982a3244a3dc6c51373039 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:153cf818b80520f04979f1599c5bda886eb44e28f4825b26a4ace0c839e09484 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:cac9dec6fa4bf6541f33582e9c31d70ab7ed222bf50da00d5c95cc2540890e98 |