dhi.io/knative-controller
Knative Serving Controller 1.22.x (dev)
1.22-alpine-dev, 1.22-alpine3.24-dev, 1.22.1-alpine-dev, 1.22.1-alpine3.24-dev
sha256:528c1971381f39dc1a3c78e13bf7ebf907aa3dd730b92aa7e1a615d84dbf04b3
Manifest digest:sha256:1c09cb4cabcff7c5120c6a932d40330e3ebd6ae98ebc778148e10a1756305fa4
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:7b185f5ef8acb367dc4c36ecefcff7363a43dcdd29f85118704389ccece1138b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:f278bb1016a1fa813d1047676a0b716e91a0f2ae193f9ff5a127a19cca550406 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:0471b682d89a7dc3e2a5a8f6aa7c9aa6dbd2ac38ed6f38cbe903117a6b788f8c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:ceb5d35939908387564c063acc1e222e54b4a7b0559fc215210b98883aa401ab |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:fd31cb5ffa4e7b48a6d0682ec7856ecb1915a645360887770e84b629e3e5cd5e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:21f98ff9704897e3caab25e77ddcf5b6747ea99b64a312319edfe317ec9c9224 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:e7171302b9497c6ceb1aff5885d6942b8713121d7a5dcb37fd2057edb6632690 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:d834ac6ce154016245dfdea82bca90faef3a4d267dc5fc8c7e1208c41552e61e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:9cfc31d0f6f457f75822d9c9aac563318d57b7aec67ba444e4f3e9cca028403c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:44db8e22fa93e21217e5244d9352ed8f41422e09af418e9793741eda9b6d44de |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:8cf6f28a1b9889e4e063072b61c3b0ff792ad0dae430400b897adecd59ae8cf1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:0bc33352e4bdf28eefa1c63c0c0151a966429846ed4565c09d4beb13509ec105 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:6f96a2ec0ec115f0f0dd353e0514ba4d74195ee4b52cad9f2325e405dbc75425 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:7143c92bfd972013cefd2e7d778a3214b29f65d5dff3d358ffa1b92ed4db9a03 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:417d3992256b6d8ebce79c378cb29238ee178ab8a0b5de345cd1667d6c908eb3 |