dhi.io/knative-webhook
Knative Serving Webhook 1.22.x (fips)
1.22-debian-fips, 1.22-debian13-fips, 1.22-fips, 1.22.1-debian-fips, 1.22.1-debian13-fips, 1.22.1-fips
sha256:926a50c2b61ee3cae94f043f2a74082eb545501d516a8e5a0e4a67bbf3f44ba0
Manifest digest:sha256:fcca596cd12e6e4fc304eab7702f0872b6c40054ae0cc3a2c49b7a494a8f6f6b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-webhook:1.22-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-webhook:1.22-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-webhook@sha256:0a51261118d55bf0acfd6425543c6aa2cdd321236b50d7316be1dce9df23a163 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-webhook@sha256:5da20533fde2ddd89e6d971daf9c2fa45c93b0b009b56149176004a29b22976a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-webhook@sha256:7fee2462c2addeb6fafcc8a858b193cf1ed143d0853a002eec4ffd2467c8f6a1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-webhook@sha256:6103c82fcccc2829b4cae134f20d0c1828139837a4da2c85a808bda0e5876b97 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-webhook@sha256:787cf0aac2dbdf6c69a6d64093f33ef6792009df292445a54377fffbdad39b80 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-webhook@sha256:85c9dec5310a631bd2fe870db7e7aaea003eae2e1abd0189d1244098f8882ea4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-webhook@sha256:fc8481f7343d4b9bdc98e0183e6e0e5c83885ce1c8c1f2355a265cc5524a1583 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-webhook@sha256:edea7c8e3c88a6cd7a8a7162f04d9ee9cc6ee082e3535a013014c3637c9a344a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-webhook@sha256:31d275efcfc250602b2d6c94a038ede727658acf609ec5d155d5f43b6c5f59b2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-webhook@sha256:7624ea5f731192a2fd505752d89802ae2d9f553957cb8c42b59e368b1988bd1b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-webhook@sha256:4ca847dac264f84f9829c082de2ea92a0b0d75780d09d6861ee4bdd1a92a0708 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-webhook@sha256:a69518f3e36f2f67f3f97e4781f1531206de83629dbbecb8ce562d2d2c10b742 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-webhook@sha256:7fdfeff174c4fdf21784d03e5fd73a73e45afc93f0797f67b3588fb1e2871b98 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-webhook@sha256:12044a7e598dec543d46f79de424921ef5551a1e1b4e56535e28ef4d487a8cdc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-webhook@sha256:87890d39626fe2b9924f6545e400ff399bd3e63053fa1bf4fbf4ef049b623abd |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-webhook@sha256:922782cee1c73e216eb2abfc38a8d0a8031307d780273f292febd9f3177c4444 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-webhook@sha256:aaf4eefc08cdead5468ecb34ce9a847c7f0ae480e6763f6cea6be2d47aab54e6 |