dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:2fe9ebd75b07765748a275b6b2a161b7d9879511c8953fef3016411dd6a7b57e
Manifest digest:sha256:18a6b66bd4dd9908592f8c0bb69eaaab2ba93d5826548d9b053ba5931cccd7b1
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:a0d545ba89518953d471de03e24e7128ff156999583dd52be6f404800fd90159 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:b9608f29b459f421f70adf158592c5c362ceba62d94858734a32d8ceaae8d70a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:aa6656d14d505855b042da89be9defa9ab917e0fdf375b7d04a65abd9ab59052 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:e1ab2dab14dd1e9fcba4774857f6842980f74f58787485dc70da6b6153a203d1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:c79f7a3875ca98752c11a84a397277d171b47fb863f81abddb9b7b278a9c22ba |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:bbf64f95da25095cd5fb6deb56a32816763891d457965f4743cb0a193e3a4478 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:7649206b4acb0860d07007f6d46685ff2254e0c69bcdf9f34f1d5ab8fe18c0ca |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:beff3f35ddc8d8213801b7f741209b61eb33cd00024dfcacf2e2557bfd82ef77 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:946ccf9b35b6a6fa5018a8de8d4d0d722d0a77b5afe971d76be22f157afee93c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:dbe13ab9e73432124cb99adad44f0121d5d8e63ee5f3ff1efa7ba17e44b0dcf0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:a0eb015849f8b658ebc32ba062038320b2e55f6e4c199f826a820ad1b8c996c5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:4fa54ae841422e504511ec218c39756e7c8b974d3dc8e7408be51d877a42fad8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:5452fd83873fe1480ea7a2090fdf3f70c59ee43df70536749754c82c46f3d539 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:8cc5d2d0d02c05c1e111d19d273599a667a26b9a838bc6db8fbb83f337239073 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:ac8af072734329300dab6a9533e14cc56b052c711a2a51dca489ce541c531393 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:796a7bc3a93c2d965047c874b9e8305df365eca8886896eeb8405ac90c1c0c6e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:072e9a7cf2a623650c47aa478e524172a3942e054b7fbf78df36a6ffc0f1c50b |