dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:326b3c5d4dfaa3303e2af7059f6a99516c4d0a4c0ad2340290a9b3e76cbfbf83
Manifest digest:sha256:bc4377ebb1f8fbcb47456b0d653c0d7df1183afce7c37501b9776ca0ac00129e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:265c10b3e981216c5b4aa1048efeefe395089f602e6970ffeafc1478a177bd47 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:d1b9a268dcb01253ec8539b3f5d84d5793b6d126eef41864407d9e423e2cd685 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:7a565cc89704022b85a0fc5262d74e851af88ad689d32fef679fa58e0abcdcdc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:8d14171b3949d38e97b66195e6e3f15993d0d0abdabe5e7064950dabc115e24b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:e48fc696a194fc0eee943e09ef18d607efdb9f467b9a2e9b9769dac5df309c3b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:883d12fcbc93792a4d56af83e63e6a834d25f1e5d668db590dd074c4dd1da0ad |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:d3044129759488105cf673a054061b5ebe54208d26f4a8f66b18e04cfcb06a1a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:9de125e2196b4aef585c690fdef501e78c470941b5997de7fb7205892a5a6773 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:1118113d7977ed5387ff2844d6c4e5115c00bb8d2add51591f18a2688bcd346b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:3c8def9b773fadfa494594af1b1fc3cbc72822320d8c312ff392ff23cd612595 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:5bc9096aea6466d1dac90002f585cfcc3b7094e621ec2d13693f4efe77b43034 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:b79b9aaf3f5854ed2ae63f5396f2b4ad0e4e21646c8fa17de6f9c5e6ffda7a30 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:4f278ae390e4c40bcad443d27161b5a6e5b137b861754650b4c7b881be82d1dd |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:057441a43fcc7541ce7d526a422f3d58fdc50064e2331b4a971b660c0dcd5ca0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:a777240efd5e9e6b7e97c89d0baaa206c77cfc28d5c3658ab2b44915d0ef5e33 |