dhi.io/knative-activator
Knative Serving Activator 1.22.x (fips, dev)
1.22-alpine-fips-dev, 1.22-alpine3.24-fips-dev, 1.22.1-alpine-fips-dev, 1.22.1-alpine3.24-fips-dev
sha256:cad52438c6bbfe39465e1a9ec67e6017bba2a7f7c8227f81d4e404efbdb874ed
Manifest digest:sha256:7a72abccecbf5243f6d4906add883c2013a38c0dbab92560ee3cfbfa295b001c
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.22-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:d9995d444da4357a21076bf55497dc1f1bc260680b04ddd68680a3c7c2e048ba |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:c679fe6f751724b51b2cd761c8471fdac14a283b45cb0f77e3e2117f4d18f439 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-activator@sha256:6149e2ad0f7012625d95a2329ff32f26a91ac87f34bcfc8518fb06199481fcd6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:a4748f578dcb5973ce22454278b2f1b4d732678a650650ea914664879f07001e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-activator@sha256:955bfc122b49f15b96a26f6ac7f6458a42974ce80918af200c6f16eed05f508a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:3caaec573df747741bf7477ef71df43f96b49e5ab3d69938fbcdc1c4024a3817 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:45501e4bd2e5b877dd0bb20c14ae8e1ac7619128d8294706694a1c12ae26f973 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:fca146d2605c2132a67d468eb386821451104f02d090629aa63fa4c70cedc9ef |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:0d3342aa0479a4a88c2df7fe15a1e3f283617621dac02fa61ed07eb7620f3c6c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:d4f82dbf35f1cafa86323a7fa4a2e2f4da2bf51c86bbd66eb12fcd15d0285c28 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:21c9848e7b947bb8645804d97c29e7b2968bc274a7a36df49e29db72a5e21dfb |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:1a8d12e0df17862a682dd0186ed91bafaa933e64dd1adef25ac9e89cce28d3b4 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:6709fe2453a375dfc61f72d16b7d00d79fc7d014b83f1b9730985632007b2b4d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:c820b22a0c78b14cdb6b9aaf7e9afeaa1f97ec92823b4e43dc0dd4d507fd8946 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:a87740c85ce242c510579fd3a879c7a0d76d9fe13d5a1bfa2cac07b555e4ed31 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:a6c50a72993f22f6bff9d7b8ece40480b1574b9511d1a4841fd2446b67089350 |