dhi.io/knative-controller
Knative Serving Controller 1.22.x (fips, dev)
1.22-debian-fips-dev, 1.22-debian13-fips-dev, 1.22-fips-dev, 1.22.1-debian-fips-dev, 1.22.1-debian13-fips-dev, 1.22.1-fips-dev
sha256:4700cef297df9521dfe811dd89331a0de988a577ccc95c8b1b8b883a41ed2771
Manifest digest:sha256:9f3e0045826f62edee788c27c7cd171874c08280f7fea2107ea3c2f5aeed99d3
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-controller:1.22-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-controller:1.22-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-controller@sha256:9569b43f6334eaf0485b0a4e861d064a316a037ec76b143d9ad118b0ca275a49 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-controller@sha256:667f868defb39a6762fb40860bae6d876d6e6158d0d1ad3733431d20e44dce78 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-controller@sha256:a76d3b38aa173cb74830c9a3151cfe52fb9e9b9d246795da0b743c5718a12f3a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-controller@sha256:fc197a34ffb5353ac8e8a5c78f2c15714fb3eaa684d6402ed3e0c088a1ad55e9 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-controller@sha256:9e03f8a0455b05ccb7ba0703effeb6bbb1f37e63ab3dcc8366ccc9e7dbddd389 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-controller@sha256:8a3aa6d76f2f8a95018036bf3d7d8c562874deacc39bbab71afeced415683934 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-controller@sha256:49af5d83df4e5145e83372a9b83354e3ff9b2a17c983064d5680ee6a054e4e52 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-controller@sha256:4bfe66f5fa5e6a5ae124d72508b15a5a1b3a56d949f37c10e9575c4d3a01aaff |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-controller@sha256:477f86a0b8e0bfd6ac489aff7ab3c16ba7701aaa7dd0e5aee1a272b1ec26738d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-controller@sha256:8fb1dd4a7b46cfefdea3695c53b0a22e86ed3ee4268a8c20543d86de1a361f83 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-controller@sha256:344a92efe5189654bfc2ba15d4a54cb002ce40a07439cb30f01d14d7a60cd47f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-controller@sha256:67db3a9665b53941086072878bf9269f43d27c6d23e5999169466adab6eeb58f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-controller@sha256:013f0a4bcd414c8e163f13e46768ad4fda04b01068b8556b90830a642fc276f0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-controller@sha256:4653af45dd50d05705229b0e10f539fc9bc56699aeb208115ad5a5e73021dff5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-controller@sha256:a5e81a16762f2bd07532f5fc3bddbc6238d53b74b6fe09f3208ad209797d07ea |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-controller@sha256:1f12f7cf7127b8c56148a2de8f75a671e3ed3c56df91e7ef81fada4782b284dc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-controller@sha256:edfb1ef942f0752f743e663e2ff87bcde3923ea4bc703dc44d019e1a28c13ab3 |