dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:3dd023a5f476254b099314f10af9fd1ea9036dabd02bc06f73e91e8df2321f82
Manifest digest:sha256:017b06474d31cc54ad6591b0ff177020042669e28e650d7940756e6d2e2a9665
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:aa3ca0c03c143bdaa59dbf7bf499efcc96e3936619b81eaec1cd3649e0998025 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:67437a07693552b6deb6e52b37137fb9a96e463a92ff7440b4699b3d20bb7f92 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:b2d8e9969e69981807c2d257de1d56932975de6b1caf8757ab0af41507a3a5e0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:71fc803f653297f99365dcacae506247306543b300c631ff5b61a28124edf9ce |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:995aaf06e03108cdd9dcb4518e0aa8ee7b37f3dc14de0cb29e1cd8c40317d20b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:5d7a8704bd08916c1151307847ad8f2192c64bce46b538808993d66ca9f91c88 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:23b9cd1455496576f314c09cedd814267318fd1dc4033f14bb31ec1df27b406c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:43b0108ef580db06cba2d1ceb8ceb5526993c71e9ac590a73a05aa40f62b00ac |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:e3f28a33dd1f48831f71a502b9df9f6d7c7606a2e7188f6fec504345aae547c7 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:3790674a85570132e15f7cdb2413b603c7988019f05be7faf6025e4b67ebef00 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:560eea98b71cdab7240b46decf55b7687f2964aee684c76d64cec2e6fdb29c52 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:f32630193c089dd152b0156187fe57434e7089f5c6683940b9e3f6a2f7599c9d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:2cd30223a7fb954b2f6116184f345e09c6f86e320a281ffaeaaf7849e385f0f7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:fdebed2a6a53aeb5bc34f75a0be7a7729ff8ced225291eb62c5b78bd691e414a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:028bd5f12d93aa4805decafa4a1a9550af058e8bf4381300ab05e1636d50c92f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:16b09ed7d29804a4272c011566007c04b83952da6fff9db601ab8ebdf340b849 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:e343dbff9d82fc7985b87e9fb14dc0b607265bc42a753de55521381c850401e5 |