dhi.io/knative-controller
Knative Serving Controller 1.22.x (dev)
1.22-debian-dev, 1.22-debian13-dev, 1.22-dev, 1.22.1-debian-dev, 1.22.1-debian13-dev, 1.22.1-dev
sha256:b690d8b073816731bc9212efce745f960e8b5d277852defc343510f47903dc84
Manifest digest:sha256:f6ba11a0bfc37b3657879c31453cd858bc973d8e484dba90687d02e21bd4f135
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:e102e0c99bbc73e1ad6be6ed58e6e59f821b1731ca034eb3671dd7322aa56a91 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:a0545ea4cd308c21a44934335d62c61e51126a6bd2b32cc501de04031d3a5a6e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:e4f465a00818c89f695d2789e95d62ca0053ab018b9108fa4fb33b8271e27706 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:b7513ef0627c635ff4bfa6d3fb7dff0d9335924b38d5c1461e3d5de5bdd823c8 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:23e70f0a86f9ceac7e2d2b2a3c3e65181d98c0ac1028bc73aeb7acc5ef341569 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:4456466f917823c32b30fd9498bef6ccc51f836a2308181ab490d91576784f24 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:034643ebd583c810f0c25bde8a9fe90d00e5e734cbd082b9fd6ef8c8624959b3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:e07a683d1bd859ceabc5d1e37c827338f2e65c176e74aabdc68e0742906d8cb1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:5f9b841f39941a87dd1f53b7f4cdf3402ee562757328d326695fd24b49eeafab |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:3007ae0c37e10bc6d6894a35848d3a218dea8a1482ceeef4096e40e97822f551 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:e3130938f31ae3e1e62dc02f6674a627360b83026f328f1217bf8b09e2917e96 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:e09bb0af1bae0a12ecf107b1b8c5a3c51853b1df4594bdb290ca13853aadfdfc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:79accaaf22daf711c07b8f65dbaa1f89c5aac73f10ea90372c7b4476314626aa |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:637a2245d80af1868d105495b08966ac3f018986f0ed3895c2665361894efad2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:cd0946735f37625c347455a80cfc3c6150986864df625931a0af49d6a18d4603 |