dhi.io/knative-controller
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:0ad9d5fcba61b7b65c67840c89e396a88bb5f9e5a3e888582eee341e3361ca9b
Manifest digest:sha256:5b8a8e2fa17d25b180a4c918aea01d8cfc248d84e2931c3ff6f4f3ae71d5c008
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:852bec4f83fd1ae16fdbfd5292c38c5dedb4967aa36678efd709db0228a2fce0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:7bb41087fb239735851cde4058b99bceb30641a7c8be79fea5aeb99944f43e97 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:8dc1ff617e8b9a69a4f0651049a4bc1a9c245f7789e3f2c89f14c06ddd0478c6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:d38db92be24fb544950733e4be2aed4c64eaeed894af47b11cd0c283871f0d84 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:11f23ebaefc48bfa8daf183c5c40e11d0e1cc5692e4acddd8536df9f600c5b62 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:90ccf1cb4d6c6203a4474470174dee7680eddfda85bf1120150236f706518285 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:e08f6b3569d3f8063f6fee550cfb6af602cffddafb0adf88966fbe1029e65472 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:1ce1157880087d2e20fa82312a90c6678142dbad60a7b65c53354ffeac4cd55e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:9e71bf9422472840f36225fe9c33812261f321c943684c68e9818ed4dd3facb3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:a715d033f424fd1d3a11d6cc90667c54e16751ca979b25d0740e115f015fa901 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:6a948471f1d43780ce71c3db9da9806603c021e2a5054d5bf2a932bdc4405e15 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:03ff18acdeaa1d34eb1d7e0d9842d331ea24f132c59afe552ae42d9a273ac96b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:aff1cd4f4c9502dd54aa5b34bb8c1e00a68a68e17a1d09cd45fb33e2b97feceb |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:988f380d1228bd4e2fabfb44b455c8ecb344a5095c3b0d33de487e02b508349a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:23f0847cfb8eefdfc4a2bf9079443d4b322667d9d47fd468e39f9a7aa7caefbd |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:86b9e938734cef1e37f5965099df096ccb7a511a763bb32b67b80bc35691b6e3 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:ae01ac15cbbba64f819b20025b0925b940cdae4b129ef69cbaa06e022de25ce0 |