dhi.io/knative-controller
Knative Serving Controller 1.22.x
1.22-alpine, 1.22-alpine3.24, 1.22.1-alpine, 1.22.1-alpine3.24
sha256:b2091d7adbf4807e6ed99713a9694d5c771488c7304449d5e988180af4b191b0
Manifest digest:sha256:05d9ba78fb8cc7f9dc44a95968d7e1b9e80d3be5c7f2aa6ad7f6327aea8d2d6d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-alpine2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-alpine --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:9ee6a0cfdfe10080ced09c2cdea1cac8af6293f8c3730e43836a849b2604d94e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:d419a2dae3ffe5320fe0c520a6f8e598024d2a1b54d94d7f42a8c1b99e5a7875 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:01efff9cf0fb1e93075e5b6692cac5d6ffe0e29ee13651ad62f87b86e0092910 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:d6e3ec6e8d5d0d2886cfcb6965f35af043182bf91359d2995126c487c061f6ac |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:a942f43a209aadac521284dc01a2f5a86c5ea79f06a1f6e8f33fd451641d6ae9 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:8e10126463eebe27d44d4aff93d60167ed60a8839e67c298ee37e35b2c0cce8d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:5acd6a09fac7b703608228b8fe87a6a98804396124644d8651fc10bef8b668b5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:35be7f3dbcf6c7d112634036492309c764786903cba0b0f6e3026c89ce0b0c55 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:61f9f97c89fa512824fc2ceacc3a2cbb704b3d2e60c17687a3cd1d24a1db24dc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:60220f6033a25cb7fe69847a6fba02e522121147bf01ae46e0cff10159e46812 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:1556bfad9972f208a62f755a0b786d0455e400f1e2dfb7ecd884c3c3a23a2417 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:3f334b39f3bd9964bbe14a3451fd0c8696c2d556d3f44d21aa1d150aae1fb3c6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:7d9b126a5f0e088ad97a566353defe2c811e24e84179d7e6dc48cbb1958671a3 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:4b7813640df024061c80290695115dd549a0a6ee3b7196259aff981be9e7cb60 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:d521463af4290b3985e431b4920addcf34ffbf6f21af99b6d4cd1cd46600d5c1 |