dhi.io/knative-autoscaler
Knative Serving Autoscaler 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:aca24dc7caf5ae7465bc57441c8f4b86a8ea660f3d5ff6a008e1e882836aaab9
Manifest digest:sha256:4f0fb600f75cc38df0aca44540ed5082328ffb24b195ccf623e89b60c68a1dcb
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-autoscaler:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-autoscaler:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-autoscaler@sha256:96cfaa8cb493719469db0ed5f7f707487d78abc6b1fdd5e3e2da4aa3ff5597c5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-autoscaler@sha256:6fae08a9b7d4ca8a11547e1f95a093da204cf69fd651634da31f1c1161cf89ae |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-autoscaler@sha256:53188b5277fb52baf1593b4f59bcefb003f209020007a6e88d2e17cecc57f112 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-autoscaler@sha256:73aa135b0ae4b299104621819ddcbe6de420cecdd10a36a51ee2a6a8ac456b94 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-autoscaler@sha256:d3710972c95777655bce5f59df2eef09fbdb686e8d28ac2fad9de7cf682fe7aa |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-autoscaler@sha256:f9fba26c48568d6dc1bad0ce8295c007e8092652974b49e6df1fae38484e9ada |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-autoscaler@sha256:194d17b8f60c0cc56da1d65e39c31bd2918ad53383538a104623e7ec757f2c8d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-autoscaler@sha256:d0af7bb782781fc1c14e714828b33028c7d3ec09f72d8a8ba6ab342b01594d41 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-autoscaler@sha256:ab4cc1d3e8082d0c2dda924da669a2be96e7a4a105c990144bf28679709d3cba |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-autoscaler@sha256:50c92671b532a6770f1fd385695f43ac7d62250d6bb13fdb0af1abc4015c7614 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-autoscaler@sha256:8d76eb39995be66592e48c8611197b93ace78c7fb0318ddc81cd8c49476d4bf6 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-autoscaler@sha256:1eec3601e8c73399dcdae7775667dfd76271bd5f04a6e2deb3a939ad6674c779 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-autoscaler@sha256:0ebfa83ed16c91c453dd819591cd57018d044979a1eb6e5b8cfd445e75ca819c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-autoscaler@sha256:ddaf35c01a359c9ac1c3668385e8a458c4a7de95565c162458748c5fc85bc610 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-autoscaler@sha256:dc8af46f4fa638748da9b37b578f3d36c46acff77fe168200952ee7a9162ac8d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-autoscaler@sha256:43a5f17068582a4e994f7d3c6c368de86a69d8a51e223c452c8c14fdd06b6275 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-autoscaler@sha256:0f3b70d9d88dd25b4c7ba1f557ff1cfd19c69a777786971149a640c1028dbbbd |