dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:a348fbd5d57862be25f0c9581b9f24c3fec7c1e0d4fea26362b748d3744d6a1e
Manifest digest:sha256:7196b9093a8a0206a813fd5fbcd7fb377d6a4e241289f7c09991ef416dd0ce68
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:9c9460f5046801ea70bd7df8ab7378dd5a000d4f12c7021950ca4af655480ba1 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:4696b0d4d5b69a2017dafec05cb7edd0850079a9824486282ba7f1fb82410e66 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:9eb7d19d645b22c983e8b29687dd514fde4ce1e42078da308c63a48ef10e4769 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:42c65be4142e06be06b623ec7cb24a6629f013714fedb400975a4e9b21ced037 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:dff5e650b78516a37e154802cad6b360e0f07e73ea97a89a994799185d6f7e98 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:84e3943d5a50af05ae58496444f63994bc2d90a53029f6bce2438ba816841cd6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:0c84bf5116f879b7e2fc54a7f9b0eed18f5035044da261fae458f543b4409d34 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:8607d023104a49e2c363542c49384f9a2062c67665b230f4e73a0bc9e45a3872 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:cb732d0aef37a8f501eb4d55b5fe15d624654374bebaf5b247798a99f88eb3e5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:3832a3eddac8d038b6a44a11f50e7ee7a545762110a0fe926db24a2cbb28e3fc |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:b17826e13faad158336504020df978a1bd72413ff300271bb2e2f7e1e267d5f4 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:2481f7122c27102deafd657eb9ebf19facd509fc297d99e348df0cc43e9148b0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:471e710b2c62b0954f49684c626dd963e384e7df494f9459265afae2ad710fc1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:14d0e13d9b8095e5abfc9e791d6f30e44f0fb74eafe14b5f5dc326163c639a0c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:07f19be57fe773a87a3a679067518a79654496f4571a1a68c2807593b0ddcf80 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:3cac8071c1c3ee484ea5d11c0edbe722dc9df84f6a106e21041a84947681cfd9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:1a048bab9b3467cef0afdfcf638d17619ab0393c0a99ed743d77f5aad8a86397 |