dhi.io/knative-autoscaler
Knative Serving Autoscaler 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:d30fffdb469d90794d4fc031bb1285cc7ce94ab73e62900a18251d5ac7f0a0fb
Manifest digest:sha256:fe98d6fe5c040c3a103cb01eba47a0476a73b46d5b5d8e880dfac8642351a442
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-autoscaler:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-autoscaler:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-autoscaler@sha256:6d17caf8b1fa4683a8e82d8eb16939161d9c54be2c4fb47d59d49633e44fe96a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-autoscaler@sha256:4d957fc77f0e5dc23d247de381735bad69f12a6c2aa42ccd37bb291b22f17c8b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-autoscaler@sha256:eb86bb965c65d06e5a571bf4b5f9a93982a2315dbb218696d364313434f4dda6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-autoscaler@sha256:bd988b986f1de9c195a8f5112bc916cdb7bcad13a741af01e4eb7308f324baaf |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-autoscaler@sha256:6bd3b1ccc16d44e56c1fd12ba24f1437481ec5d54d9d6276edc21e3387849355 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-autoscaler@sha256:8f0eb7403a798ca8443f118d384682a9d3d3afc8911d4b06f59ed53c09f96282 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-autoscaler@sha256:53d634daea5855e90a565f3af89ebbedea91d1c049caa58ca94b78e97ac24147 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-autoscaler@sha256:b4ceb18bc7a117c6fe9e9e6e0cd236d4251cdaf7a9179f8f32546953767b7a5d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-autoscaler@sha256:af67196a5b0eee55fbd25686852bd1d1f0004f07f18e876e42758e0a665578d1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-autoscaler@sha256:1b82f72c5af8b1c90635343216ec4c7d3dccbdeff5e616a355848b03fa6236c0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-autoscaler@sha256:767312112d5117d25298d896ba999997ec446d726a269d070a1f49d0717ecca2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-autoscaler@sha256:2ad631caebff7704a024645bd82696072b3fb7f42910e4ebb656a9064c2e52fc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-autoscaler@sha256:fbcc8a67f9f3c3e14e765b313483f50af6f4628237b5c951a6450a6b51aceef4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-autoscaler@sha256:3beb787be734e31b3548edf54b9e5aa9eebf2c7ba8d54349571e856c2cd0f947 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-autoscaler@sha256:ff5757047ed1616b564b0ad91447cdf3808df2d2010a27f26a86df866c82ac82 |