dhi.io/knative-autoscaler
Knative Serving Autoscaler 1.22.x (fips)
1.22-alpine-fips, 1.22-alpine3.24-fips, 1.22.1-alpine-fips, 1.22.1-alpine3.24-fips
sha256:d50efbebbbad059b0ebb67d38d40bc66c66f4dc95525c98992870995bd23463b
Manifest digest:sha256:e513f9a5c7ed3b761840207fd09a2a2e4b5fb882e63fccd185a093e11bbf4042
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-autoscaler:1.22-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-autoscaler:1.22-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-autoscaler@sha256:54a7a1e1151b5e6821b7facc4a10deca1e0f89028383bf3e5d952abe03f4b578 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-autoscaler@sha256:3869aeb0e12d5803753f22f3e43a54893647d82c7bc5b60517586d19e3c68058 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-autoscaler@sha256:a91db92eceb8ec751e210435f641c4d4398356baa4aa3a7fa8d23669179c3e2b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-autoscaler@sha256:6c090b310528d0ab7f25e7611558e786b6670c0bce0ab328dcc1fa41e9c0929e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-autoscaler@sha256:81bde6c32f95c74f1f22b91d44892e8acf5cd872a9a5b9d8da5374013d078f72 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-autoscaler@sha256:a7c76eea40ba3188faf811b014cf355ed4e960630ee58722610f82883dc9806d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-autoscaler@sha256:51e9251fa0fecc4e9d0c904201340a5ab8e8d75f5af340db6426dd5c985f2b2d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-autoscaler@sha256:c30eb0e3fcae753985ed9efa9f30bce308eefb57c4a0227b0af78636bc78b9f2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-autoscaler@sha256:4a2a0f6cc74bf98a80a35375797b4f50dc3f39ec779850c18f0b2d0b59fad227 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-autoscaler@sha256:7f8e25a5dc1e6bad3a6411cdd6c363f11323a3be23ec2537cdd3e81860062837 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-autoscaler@sha256:a665e784e48a3a88c44b0b2dba5f372dadb53aedecc1e43aed5c1cedbfc87eb9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-autoscaler@sha256:c40c43b5024bbf8fd8f39d962f6fe2eeb0e593300544a496fc06796e3e882f1b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-autoscaler@sha256:2fea8f976703172a7f2de9d69c2fd2f02f021eecbf9ce4600080d0d608860e2b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-autoscaler@sha256:469976f3c958394edbc807d4b36974a8822293a2bf291133f53e41cce0d08fbb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-autoscaler@sha256:a5c914b44f16a37b9f4c35f1ff35b0bb3f48d03e42ed0819c8fbabe0918894b4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-autoscaler@sha256:04d4b943b1cc3e1b721612639426e1633a3db425158ede0cbefc5ecbcd081c69 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-autoscaler@sha256:c317122b77fefcfd7df2d000afd3fdf150fe43933ea092d988072e88fc1ca614 |