dhi.io/knative-webhook
Knative Serving Webhook 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:c8adac03a127de39438c7ceb5018ab32995f0f07aed6688e0221fec3672e8ac6
Manifest digest:sha256:044505c77f7688d47d1efa7bebce13d78211f64ec71f0fb5e2b369599b05c1d0
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:d038e3ff35cafb81015553c9089d12658991644fa95796f2d03a3c9e7f79dbaa |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:7ef27a53d5c5712db6f05d39409fd3c888e5cb1e870588b168e67e4ea38eaa7a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:576aedbd2a1511d8729586b1f60007eef7682d39b5600cc83fbe1c957f9e61b3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:db309fb4d312169b57b8d70165d7758765822c2bada1a5fa973fe5d0bffbfe8c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:d4c3337770f92d09755eae80eb33dc793dff3d66f28009ab7d1e19cb9280bf54 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:586f3dc7ddb81e769faaca787985af2c569054bacb83e78a09b4bd284a8038bb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:993be6b53c6b5b69a296bf84c1eab52ff1a47570e574ba97e165533dbaf480c2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:831b319a48f9c667af2a9a4a8fdce3a2b6d6d3ad49c87049f56fc33f51353731 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:171aaefe77066a9c0f49c7441172c5752a3229f4e21ca3061a1613ca3b60e46a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:b3b84dd088a497788de42add6d6bbd047b14d2e033e49677d950aa6c1d5b66ab |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:404ee1fb3a9d8e34087fc4bab45efc5019d37c1b491df78cfe3e8237b8613b81 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:36ed620871bd911c9d75c4445d12c92b188df0ed6e4cc9997840eea55154a606 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:e8bc73a19678cbd7c2cfd67099f7214ac5d60472ac860acf5dedb8a8dffe04e1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:ea536f628c70047beb4dd9bd4a1cbac730195cede08f6a099c6c1d4698e43727 |