dhi.io/knative-controller
Knative Serving Controller 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:48f8343dfcdc236c9a69595340b94a9c5a0ddfbb62408a4936dd07567781b00f
Manifest digest:sha256:fabeda87301569dc27481b47aa4c6d8fbb1400a8be36330f569742b6079154a7
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:9eeebded08e50579f0dbda09d9eb3498935d242a5914bf565caeab3211cda660 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:c74b4b31f94c9307488a5ce6d1d9605a8f9b06b4615328df875f04c195eae412 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:3b2c503f0b95ae7da17cbabdf2dbb4a4fadd3a9af613b68ab5f4a21faec80284 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:16575bb70acc04128c835f75a0ec7ab98cecf130fbce00154a47a408f514ffe1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:f86f418f9510a80212db420697d23a1ce97d6a6b0dccb25dae515494133d20f8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:2bd0ac92bffd674ae9ee0812eca4733e9ddb3f8501abdc4a656261bdb5dcec2f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:549e8023d62c1ad23e638ca06d531f9909a5cfaa42717c3564881aa77e4cdb97 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:c555b9461b0b1407137eaa509d1c070ffad1055edae873d21725ded7d4a49cef |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:3a3822419edaacbc7ed6afc2ace2b5bb08f54cc988c15671702261cc9691130c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:9f2931d4ddf95391c0976b789eadef0c9f69b169ea2e6b3312f1e4a283755f8a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:2dbec43a6e78b324d302004e5b0d0c1df538fc30c7d7018ede6579f044ce1fbe |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:35d646268ff2787f4cab4774dbebfd1c51d800b5886463055aa5bd5244e2e402 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:650d2b388fc0d85918d30e6c18757a0a8ed665b4c038d6ee82c11f11d53639f0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:33681c81d021053084c7e77f5277443dd76bafbd31dc6dff5dd19ed3c79451d9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:4b121bdf0b06e900ca728fd027ac031ff1969e70e42c0e1bf9c4b457712b61c1 |