dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips)
1.22-debian-fips, 1.22-debian13-fips, 1.22-fips, 1.22.1-debian-fips, 1.22.1-debian13-fips, 1.22.1-fips
sha256:92c55f004b98f675b629d1594681da6f6dad8c9c8630317345cafb7d4b746980
Manifest digest:sha256:fb12dd8a4347a6d4b8886775ef82b9926afc2edb5a694d88faf040a1948c1c98
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:9bb998eb206fe9a390a74a19dfc81a5f43537faae56d91afb536e5109b509c25 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:04652bfa5835978cc0d0c9643996329c064f575eaaa1503af96c7856ce052e21 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:f46647df0e411f4a939bb8600f03eeaef0fa79fc25e4a0912fadebd459434d5e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:44006040ae703cb8c8fcc4cf840cd257d8aa9439f8042d3ce1bd9834580bbe2d |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:642627e8988bb5a4d7dbae03eec0b3e2ee11ec98f4251267b5d2de41e7014c0d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:2171b0ce38f25ebd6c6630a597ba8f1c0264c851a5e951528434e62550ded726 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:ce339c46b305c36257483f4e56038cc441595648be341369033e0c2eafdf5615 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:c8a996938ff710153217ea602450d2304106a73860645afdc8697729f06e6a41 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:9561faa63423c72140346b768a4e9a379b3bf089e37e5b8260b8cd7d3482ef1b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:04a3fb3300dda46aa6db3862ef719ab005522e9132bb283a1c999ecd7ce91ed8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:c3e06c606f9de04bfd66feeb5382078edbec961556c22189e8353540f26f78df |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:3216a83732c75168c5f050b8eb6e6f6749e8289c29b306d7a8f0e4b5504fdc41 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:480c4a94acbd63de340c5981aef888071070f0427a7027e59abf502af7d46d8b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:87e04ac7900d5c25f4c21be4b4c8c92a4f1e347189bc73a68c31747514285f21 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:154ef578782440c9e9873cbdd0cfc27edc7fecb376067047ef098408a5eae189 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:d800e00ea3f62c748b5c66a3fcda3bd890ba27b2e94b6207e96b4829afd51f45 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:632b43a8449fecfef44a8210656dc313e3bd4abb2dbfe61d5ec79cafc1866e1b |