dhi.io/knative-controller
Knative Serving Controller 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:9840564c0a40deb429a4bcb18237d10b713577f05b723d65a570b93021715a16
Manifest digest:sha256:bc8f99dcb10f1afc1a22695a7cf2e87a69c0465a7618601604f339ff2c309966
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:bce0c2eb0ebd8e19fddd3053a3b3f5b76c3da0efb1ab78be104e9e1e1288eef7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:0fe68895e1ea4f41052ceeb67a5727cfe0bb97d3d2d9bf362c2cd142ae21d917 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:528aad31f83038647320ba2716abfa8ee32b6c1c27eab3b89e353c460afb0dbe |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:780d98744606122d7b1570f1ef099a5a0ca7c6f3359ecbbd9b72ffa376abb330 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:a0c3b706199b31ff1da75765928316c438acfc793ad05adb61838f581fcbcea6 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:7cae8161f27820dab6064d782be8ddd480adf55689700ead2b287c0d4552868a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:82f93dbfb0f10356a86fede208d54335b8652d1b25b3854fb9457e4263aa6be5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:614795e7bdb12e2a98a96380dbd59dcdfa78b1dbf103287b055f3381b167b390 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:c6e5bc7c2283741ad266266c9d2e220a0fdc2b272d8cdde384e10cfe9509a1c5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:7c3d459c126c9fd1b1ae2f879cd7e15cac6cc5321df41d76ee4d40a5e3f51463 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:c76278cb7bdb5bbfeff5280013812181d69d98ddb5ed944225d29a5d7dafa816 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:7c92788d5bfd4049b5896f6ab02f2bbdc5a7c431154db36550bd72fc6afa3b68 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:f9cc84775a5579b2df93758674b91b5689dad80ca5235b2feda81d8f096ba561 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:6f9cb6ffdad500048fb3aaddbec095cc7f1f422cb3821cb14c502c242be58377 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:4fbb8af78d6fe025daa7949db8014a46f0638511c219048bd186c3799b6269fe |