dhi.io/knative-autoscaler
Knative Serving Autoscaler 1.22.x (fips)
1.22-debian-fips, 1.22-debian13-fips, 1.22-fips, 1.22.1-debian-fips, 1.22.1-debian13-fips, 1.22.1-fips
sha256:2d6e69715eb4d49e5a46ba62f5fb90baec4b4459a46051f9f3e7413ac369d71b
Manifest digest:sha256:d1b688c7cd117e23e9b1f2211c4c3e76de91ab6654c14770d85882ef864f8059
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-autoscaler:1.22-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-autoscaler:1.22-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-autoscaler@sha256:11a0913533eee57b83dc8a73d0a696ba35d2799706b41267632103c79e0f6290 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-autoscaler@sha256:496ec3219f9fd70feea72bb1403d3480828b40d17571270279b63079231a64c0 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-autoscaler@sha256:0b56252bdc81512314433612fc8f34136f91bd0de94176c19ad4d7520cd0709b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-autoscaler@sha256:855b821e813c06b098598e5fc8b19df5fbcb2760265d9f4eb3e4b35ab1bf0b24 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-autoscaler@sha256:b04903a87fb02bff3aa030e3c79b7d866567a203ec994505b294150615685283 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-autoscaler@sha256:653d733715e0ce6743c7ff7ede07f7010ca418870a007d0718d051c68f4e02d4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-autoscaler@sha256:d2b4319b38c86fee4089aa452788fc8e95abc46fe914dfcbf028b77758bb25b9 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-autoscaler@sha256:898910705455a0cace1fd2cecae582c1f259a6d39979a3f2dc61ef0a5cdb0df3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-autoscaler@sha256:be56c53fcfc633f4da1c72095e342c4c879848f9e46e990390046cc3311662f1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-autoscaler@sha256:f517c12c288b82bb0ddacf36f72992c551f846a688306137e86075115f3093fe |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-autoscaler@sha256:c8941d778869540d1bf5756693fa6d17b89060dd29dd9b861cc5d2a6e2ee10ea |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-autoscaler@sha256:20fe24f43092016dfbf18796a5dc533276134c16dcb3c77be380ce7e67a96eff |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-autoscaler@sha256:443c49119d6ee1822fd2a1cb7d61411282b5dde1a104b41e6040b98cbef50ff2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-autoscaler@sha256:301bd4b5a64022e70b71d952d904bc6f67eb01814fa57aa1cc2333b76731202a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-autoscaler@sha256:29838762a2a97e8a3bf8e907c424c2ebf56d97999a8a0224fc54838132c3fb3d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-autoscaler@sha256:0b638ee9948bab507bdc8abe9fbf8fdb434cc17036761ba79728efb615ac128a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-autoscaler@sha256:6b160b87e3fa0d173875eff059c9ea3e867f8a6fa8f373414b5fc57638fbc7c6 |