dhi.io/knative-activator
Knative Serving Activator 1.22.x (fips)
1.22-debian-fips, 1.22-debian13-fips, 1.22-fips, 1.22.1-debian-fips, 1.22.1-debian13-fips, 1.22.1-fips
sha256:9ffe517121d965555e1012c22895dcf31e74145f8133e61ae052da14dd8a3aa9
Manifest digest:sha256:c867034616e27262a5c004495863b8925fb77ab834eacbef9458787704890124
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.22-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:08e2d7c09ae143a092760c208822ac57a53ce26555ddf6fdd447d1aeed10c245 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:a35fa12eedc2db12d4a9eeced6d569cf53ef13c68a0d3cade01a5e2540218917 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-activator@sha256:19f5ad22d4b26b6fcf9e61d6d9e9ca61e4041ce65172104737075b27ede665df |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:95bfd5dca7ace45e5b1d9d1ea1991f033085bd46fd82c04d36a4b4f077a7f982 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-activator@sha256:cb362aa9d9e844ad01096e8d25c787070dfd4f98b320578e7cae6df6ee056480 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:ae6ec60bddbaf1b977204d912ba62c4a82f854a40b24f5eb928987a9a3c719a0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-activator@sha256:6e1fa66a29330fa7d6ea3ee6bad690fea9843e493d83a67ae9c506367767b29f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:1f6d82b9fc89efdd7f7b4208d2b727eaa661ce19b105ac5002dbd61e37c89597 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:0db5c3a42fc33cc05398334b36b9cdd21b6efec0982fd72230308b443a298830 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:0aa54ff8232585421ac536962e5afcd16e2805a7a030f05d1913e0542ccbd671 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:efdbea9b5a9e31bb1d1e11b9237cf609773c5d28597ed10cb7618e509d8b8b34 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:ba85ca7e35b991e8a931d4ea9d493a596f55e150e0a2fc2048063987fa3551fe |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:2aed6f0d55d154ec9a8c4b5a44ac17c9ab268fd9d00a85c901ef2b8ebbe6843b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:3298fce55f8360d7fb8b7cf780185e78d2ddaa0cf6cb59e57ef2804a37a05a34 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:f9df88f7658822870b29193944f71032cfc8beba421f2fd01a7ba72f7da48210 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:7d0691bb6a6d985d2ce31afadecd9971a9ff71fecc2594438c70e9deee2ed346 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:f83f4e178f064748d7d870d20b4dd7029ab33b22dc7e9295bc92a4a00fe7cdaa |