dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:0eaa2950cdd4289be72800da2530c55344b1b7b554c92f05f9b215cccb4afcb4
Manifest digest:sha256:98359db7ca0a56318d0d64503879d41a55ff7a657fa033bd0567b1f30ca262e2
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:f73dee74ba7c129542915d8a987a093c23744b4ec006c8754856f76e7701b73b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:ae34ef3db3571e6dca3120450a125627e2c19a25308f78ee4388334dd809c976 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:2edf2a34fffd689db56fc4ba1b9c321acb93540553f8478089dcc21bd3d2a1a1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:bf413e1e6a7057979b97190ef9c5705e8727b86f66440932d729d2ddec902f03 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:12f8dd1a3d2fe7e6641e8b2396acb719c2238b4e6d29da1d38bab81e96168048 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:a5bd8d7e4e8ed54c309719fcee4861caa543c5f9bf8d1f27a79618191ba8e163 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:5cf03667d616f36ee4f616e15d50823dc9d74df0a6a0c616c1ab13c52440247f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:4f7f794e4c3cb4b4b5b9e75d91af716effab87448ff8c02b0717344da0897e8e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:59dd715e406fe022f002f4ae2daa7c3a5eaeeae7c6978d681d3bb5472159e670 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:f6784930288729e97bdb486b1efe677012c5672bdf52a57e57d01ed088984b5f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:e83bb9b872ad4ded907bf0a3b197719875763814ca749a38f471e6f4d078b0e9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:296f7192693f0929ca20bb79892833afa2643f123ddf9e4e9780a121f418aa81 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:24ec62283164722c309cfa6a30bd2925dbfe524a8238a7de07d1149756355af4 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:c97e8a989a1cf344a667d356dc041db7df4c56f52563459c41d155907d264acf |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:8302205a6eb92d8d8c7fcf898ae975324f3cacbfbbc4d72cc8c3e9dc402f8a96 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:5b7a3aab3876e3d94e3be8c243e32254e6f5b9f731d88fd9adef5ce5b5170aa9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:3dce85ee9a6853d76535f743e2832fc763f418f02135bbffb6ca005124e2d5c2 |