dhi.io/knative-activator
Knative Serving Activator 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:38d114d54c0e0861eb05adb1f684954408709274a4dc3c5de3c303afd5872af5
Manifest digest:sha256:e38c93ba5f83fda573671b0761a0605858fe894867017868b805c9cd478b74a1
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:358d7e057cfd37ffca4827bb8d8d32ad2301f24a60070ec12703b33fea78e666 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:c775dd0e333f7c00355e899cb3a7cc8e51370f38b994e5f99fea23b5d2314385 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-activator@sha256:ffcbde95cdef555cb570902cb8f1a090164f8c052689f1643cded00e6823f9e7 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:e6688ee2cf079c0a617cee2bb0c49b21c267f2f22d868fa5c8375f7ec02f024d |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-activator@sha256:c938c940c11ea0a8c44d115ff28bceb01b0b66b618e3c5ac9a3a332cb3708149 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:20b5ad36d3e90f619dfbc887d979a738739262c00b63b6492a9f87dec5dc05c8 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-activator@sha256:6c3fb79b0a43069b90bfd26d4f8b49bc75c078cf34ccd3e61f7f5eb772595d71 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:8f61539d462902b5134088d0dcb752a0b72818a9a04c00e1bfffafab3a5f64c9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:3f901467f18ceacb35261b46b0ff4fa13f8032cf8ccdcfc3aa510df76927c9f0 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:bdff945716bbfa2da082c30d4c6e8222c26faabf60f6734a873f204471bed42a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:e39bb41bf9d649da12462a8890981eccc022ceea7d121ec2e0ad9d3bda6cf98b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:083776d87a9177c605c401dd3d489f2d80dc88976b2331b1c5425a77951dbb47 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:f0501a34ed3319e6d8fbe4b9b0edf06cd2950bd8246b11e1508dbab7628ddcb6 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:b5dec8ac52007da1597907044807e592af662a599b7c096f759fbe0d4121f6bd |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:0e84089b2793e3d6b6c0941d65fe2f68dc1a05aeec720e286f1bb863e49c7968 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:0a59e453a7053aff2f4db6f2a7c450bb79a6ad443fa201c58de9514d917c442a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:0b4aea4e0f4564ac304989455d54c346a8f4d172cf5beee86495d832802c86ff |