dhi.io/knative-autoscaler
Knative Serving Autoscaler 1.22.x (dev)
1.22-alpine-dev, 1.22-alpine3.24-dev, 1.22.1-alpine-dev, 1.22.1-alpine3.24-dev
sha256:e4616db4f2de5a26cb02c6d1a04ab1ce631416efb457b8be34894059f4e335e1
Manifest digest:sha256:33b81ececb82066c9c02b2f4af8cbbaf38ec651f9454146503ca4d90acc24075
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-autoscaler:1.22-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-autoscaler:1.22-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-autoscaler@sha256:e156146178ca3daffb5b4b231669c38190a4c0a01d2e9ff597a955552a02ebb8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-autoscaler@sha256:8ddc5bbac9957e8cc3a0f5a6e17f27a54e29187aa6e612554ef8103eedb53789 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-autoscaler@sha256:8146cd5237d133f26af2242183a72c2ecefaac29394c0cbe2eeab945904dd0e5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-autoscaler@sha256:e8d860fbcb780003baa15caac20f512ed39c262ea7c9d55cd076741c921ad0cd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-autoscaler@sha256:4904ba24c87c7d13004c548010ffe6f9df18517781c4ca0f2414512a46d100a0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-autoscaler@sha256:75aece7449c9c563b95407118fb8ecdacbd044bd40d785871977913ccd7dd183 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-autoscaler@sha256:6bf7bfcb210caa2328a9cc692f3c40a49de64a48963d9ae04a402ff17653b543 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-autoscaler@sha256:52e2285cd3ac6113dafb70ebb0a360476429e46dfb829144bb7f0009214c25bd |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-autoscaler@sha256:8677f6ac7d250a70d4ac2b435cbb56f48a7bab211002f0ec0e68d53dab1ddde0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-autoscaler@sha256:b48822515645c45235c286022dc6fe9b8b02599ddde997616129541992805112 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-autoscaler@sha256:59fcb307c70fa270aef3c56e30cb2ac52db15a0ca2796eff3958f4b04d2c154f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-autoscaler@sha256:2604c369f60eef2fbac2dcf545459b362e23617e4c8cf948b9f3c61f2f82c1f1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-autoscaler@sha256:5d92925945ae159533d053a78061bbffa4c6f69a0c1e15a43f909e5ed430ec86 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-autoscaler@sha256:07d61531d8fbcbac4d55177b67d0649788ad58dee6d822b21afd296c811780f1 |