dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:ff382d96cb87055cc240f4a00899ce12bab262125d3d86d8046f0b0ad1ab0197
Manifest digest:sha256:eea181c565184a6add8eacdb55ab903e958cf6689595a9472875b673a3072fd2
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:e7f20ca5726cd8836a2166e5ce5948378684a00545537a768c7cf688b2d06948 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:a6952ebbb78e3d0ee39f9944b832b768e0db8a67639953e2b394de2b8e0fbe6f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:6e0ed3e694966f8a485567c846ad5d57d6668a17d1f2a33d356c3cc675156845 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:480c02fd59464b9ac69b44180ec368c0d1498706dd979bb9cb0b94a79d35f332 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:7fff1fd1a463b53c174bdfa9115972c1ed1b132a703d1932b9677301f9987890 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:95f48e8a791246cf922eda54a870b04f281e0e45949fdd6bfc534655abb315b8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:c4d97d8be7204bf3d30703aa05e9df8d4d804e8e3cb383e6f554e690eb0a24a2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:35530641ad939b5bfe12f4030b54241f8d711b770bc6eb064b4c3f869de75a90 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:57b8956934ac49ac5433b6e932b8f130ac47361ff90752e86032ddb968f3641c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:9924a30a7ae8b17a7147b09a74db358348c4c1aab63319d3ac9a6852dc75563d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:9e6338cb7bcf840911c37652bb7b4ef00732828516eb028438a49f1000d3b532 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:84814b022da6e5e52b7477b8a0ab67b39c2a567315de5c2844b6883ebbfe23d2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:3b37991ec9befe7e6c3baa88efd4b63ca6e07e8a4c1646aeff2c7b623be9c9d7 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:edd02a30076a128f40d4085bb0a8fd9f40e524987b8e786b7d8289ca72311817 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:5bb01a56948f7ce2c8ffacbbfbad8df5b1c0fd81e73a308e64ed742e1e5278ed |