dhi.io/knative-activator
Knative Serving Activator 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:504819d7fff96fd7906728d60e17a6debc1f9d844dc011647011e2fe1410947b
Manifest digest:sha256:d80da5bf62051812c1ab51c64e2c21ddb69fd1a45eec63c84dbb4c832df08a3a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-activator:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-activator:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-activator@sha256:3dcd82fa8ab8faf3f8a2b8ea1cbb14fe5d28bb574361e99c7e45591613616d4e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-activator@sha256:1a037d7c5c785f0bca167c38acbf91be2ad815ba09cef0bdd46e609814017c0c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-activator@sha256:f1bdface661f8c11ed7681b9e9a8b9840ee97679621745fe71cc2228e1fdd3b7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-activator@sha256:55dcefaf6b18e5b98ea245829eb20b7a4b12028c1bddbdd8181728ee94ed897a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-activator@sha256:259205219aad4b28225e621d18be543024d41126a8ea7d13002aa8325df3315a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-activator@sha256:25e9eb2b86c9292654163dc57b4395ff7f341b9704519255de9402afa2463bef |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-activator@sha256:657bc1e703aefe76b4f5c750d33a79f7368c31e6d7be7fd37706568ac128371b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-activator@sha256:0909a16f11383ceebc76d8ca91cb1e21c52dd41236617d163680180fce501085 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-activator@sha256:173293e78676b826725356dc136ee0112168227315bf1dc03a5b43e813b0d0da |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-activator@sha256:5581b76d0223e9924070e9afadff40c849c169b8516c823cb77d638e5c2e4ff0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-activator@sha256:e939686e86194b7abd48254d174323d2a70df8863b5ea7cebbcc83b403824727 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-activator@sha256:63c051c7c0c0348041f1f351e84d009d588af27910cfce5435499673247ec63e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-activator@sha256:fd954928d70ce37e831f53f2dbd9a8c70d43afef0c43b2674c70d7026d7e1138 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-activator@sha256:d96b605fb530d2964cbf911dbcb656db5c744a53007b80e4073b3850a115202a |