dhi.io/knative-autoscaler
Knative Serving Autoscaler 1.22.x
1.22, 1.22-debian, 1.22-debian13, 1.22.1, 1.22.1-debian, 1.22.1-debian13
sha256:08c0d82af68f057a50a8e0097aeb5c7d0457434c079d35ffdffee09102d7fd1e
Manifest digest:sha256:56e4053b9929320038f2d769b1c6549d0f64670fc3f4e0daa1c080c9ae63609b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-autoscaler:1.222. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-autoscaler:1.22 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-autoscaler@sha256:af1d927f998fa22c118fabd5d20b7a477282555868c8541d502b2b7e8d7c7b86 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-autoscaler@sha256:defebe21304b9894680e70d2a87cd6a02de3e549f961a6a486a0b5ae337721f6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-autoscaler@sha256:fb884449f93f740cb41d57802babdd4c37a0a4d51737132350273d75d4a90230 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-autoscaler@sha256:86d6ae7f1c124759102dcfb1e9716de34350d5f360347d88bbe01d70a78dabb4 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-autoscaler@sha256:487d559860ebdb048e2821ae4101a01c3602b2ccc8a4415ec64ceacf2148017a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-autoscaler@sha256:b9e260eb5ee9675d92bdde5056e7ddb5647a41633ac0f3882bee47a215d98e7f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-autoscaler@sha256:9d80ab9de1e77308b8953591a6bb1f46eee8a73b757c3eec0a70557bf89d8b98 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-autoscaler@sha256:3980610a31e35c11b2fd4f4828a89099d64fd19c1357b6c7ac8f516f6ccbff7d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-autoscaler@sha256:05db3153dab2ca2ece7ecaac5a6014b8dec26a5d76eaf38d4f7a30e47d8e8fc4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-autoscaler@sha256:84e2eb562a9ee1a1834feb6ed29909fa3a8971775c695437f3413a42d4e0c3fa |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-autoscaler@sha256:156977c93b2f422534a6e6658e5dcf735e727972db99f6d72a8a543c429c6fc5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-autoscaler@sha256:74620fd1c8b71e065893c85bedba8c0b1814306e2de52ace99f61a9f453b049e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-autoscaler@sha256:7e830282e2dddf2a93f7db37a5b079c7224bb2dd059550f138c137cd65523cec |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-autoscaler@sha256:0d544a28b1061252cf325fe3724adb07609c2d574dbb21839c015579a38ed1c9 |