dhi.io/knative-activator
Knative Serving Activator 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:941d000de7a45035d68e7f9e9c439bdef100048a8f4a3825f3c2e940afdc15d3
Manifest digest:sha256:bd5b7384eb0f27ea7dd47baecf01fa2b9218f6ecefa254aabca0dd55d3300679
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:11dd04eb673a6fcf8e322d4f3f753774923b7d074ba3bd7ed3a38c4dfae9269d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:fc32b03139ea4d774d96bece78638cf2def62dc1b9a592cf67d9fcbacee0ed8c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:edd19aecd7a8b0a69a0ed378c76fd26a3ddaf5c8366c7e496e1be99a62a6724d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:ba9e747830ddb0b296c8402f5e6ec7b0ba3384c052d27c25e0f87b168197b2e5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:e02c084b55504f274023872b2dc2c23125b8b8b2f0ff1a9447b22e44e6ed2335 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:03aad5c2b124ae452f8b6eabb392290da60c2da64e29cc73451437539ca21b9b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:a100a2f898b209ea125ac95c481396d4b5935fde71e64cc843d1999b72c143e5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:e25b16a700559c066a5dc25a077a94980ddfe9149dc6a05af0916c976fc0b4fe |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:e0885c80e42a9057d389823bbd26da0aa3bca2f9bcd63e5964cb51e692b3b61c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:e6b88a39f5c2b57970f014a7e1d69eff1cb17b06728b7ede757d9c7e864b3201 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:9da2dfa3d78bd53837bbf56d6e13ef05590ad91e9cdd30d51894d3d2fe014435 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:2cb8d3c0f54487c4087ccd772ed4519c48748d1cbba74375c85b4f2c4440ad3d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:483b39798816d7fc78afc022483e12be62d52f6b0ab83e3c2480bc73252935f3 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:03957b9b5e232f82422292341ba786e4958ba990284bf5193a8eb451c8a2b79f |