dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:29b92b926d7a1bd2aced131e56f988d9844d88b8d78ddd8d4589c9865be09d71
Manifest digest:sha256:cda2f964a029c8a4503023a4f41ac89c2b272a3fe72edd090bc8a9ef1bf0a762
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:a3a71c029c1c71983c89686f7b0e65210e17196a69538ff34dbd63a96a5087da |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:46c725e9ccdc4289a4486293d244ad2001e76dbea75e5eb04050c18b86780807 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:1e44b3c82eba900f5be876971ee0d7128fb506ba4dd666487856295f7ad3a289 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:ed950c83233222ef7a4b21f29d0b62ea4b428c6d9515e659ad8739d00d709a9c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:a3c43c326ff5bdf816933459b829b79022e8be3eddfc932f695e393eb68ff30c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:7fcbf66be2ce6e3a9f58cd1a37037841be0fbec313642eb8337fcb566bd7d41f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:bf251f558b1f38ac73df1dffeaa71df374f39496b04d370d8e6fa0165a57da12 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:f02320f29514fd2541d513ba011b4682d9b0519b07cd0d823bda6e7e5813b18b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:979e7332bc0fc0c85bea13752beff80e95dae9b3dad90423532b1b3f9bd8e336 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:d5e24fa114861ee754302ec4c926bb56d56c2f78944df1221358dd350de230bb |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:dce2ddcdaa6ce8e54311466c3ffe6f0be1db7a42b91da5f3caac4f56d15b7465 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:2222f36687e2f27f26b77065064482ee02196bd9490148ba1a91fdbd8c8f4773 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:96e118ef72da5d775d7daea4be8f2eb94878b3ac538c5495208e8ca0a07f2a31 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:7b80d42489c1a2a0fe598f1d8beaee4bc80fcd87a43b4149ed086aada5be4b90 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:e1bb8539f9bb9b77358e9bc9101f67f21d49cac03839a93e7da8d31ad409a0c6 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:4f89c374b8cf030f9740701a6019e21bfb49a26f05cb2ebd68493d97aec09dc9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:ad0def4d641a646e9ea6f61a574f6f5879e30148148fc461b44890dbda48969c |