dhi.io/knative-autoscaler
Knative Serving Autoscaler 1.22.x (fips)
1.22-debian-fips, 1.22-debian13-fips, 1.22-fips, 1.22.1-debian-fips, 1.22.1-debian13-fips, 1.22.1-fips
sha256:33fef791e84ecb54b6937ac1a3e0377b3a58352c17211f24ae7c1277a410e834
Manifest digest:sha256:3eb005488bd8f3dfd95f08d19990bbee3e6b3ffff963c1a3d738149da6852982
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/knative-autoscaler:1.22-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/knative-autoscaler:1.22-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/knative-autoscaler@sha256:e68604df31ea4c071138a50e525c68e7979ee879ddc4b063274c8a7c810c114f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/knative-autoscaler@sha256:153f187124b09220849fd4b1d5e64af09f5a689460dbc034cb8064e1a6ad09d9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/knative-autoscaler@sha256:29ccf5485c4a157b91ca4bdef9e35a0f54b66f81e054d6f118c0109777b398d5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/knative-autoscaler@sha256:748976ef94c11c5097395fe1f8ea581cce5510b4882b8d58553dd23236242aa2 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/knative-autoscaler@sha256:9933f9b244db531b4dd956d363c2c9adfebe8cc5018762ef4322aa198eb4b12f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/knative-autoscaler@sha256:d97ee6630dc3c6c58784a5234d1490da27bb7731fa39c8251037f7da01c50f1c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/knative-autoscaler@sha256:6d700e803c44a3468c9e1cbe3c285f1b8a14d20fe54169e4978ed70deaef89a8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/knative-autoscaler@sha256:f59162e5a13a22db1099e5c3fa09510b575b4b5c874ffe5623c1394076aebd32 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/knative-autoscaler@sha256:ebd3859a60a0df0aac7e0addcd152a5f36d33e71950df94a8e1f5c413cd3c55b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/knative-autoscaler@sha256:50aca884ee191bf1f8927b058bb732f140c78227163c8b1797481f15068ce779 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/knative-autoscaler@sha256:b4f8c428b76ccf6e68bd19533a028c1447c8533bb292595bda083683df244d81 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/knative-autoscaler@sha256:8dd458bfe4293227dbf953603aa4d87638c9a96caba05a57e179e1fdb28d2b8b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/knative-autoscaler@sha256:d648f0724c398b8055143dae3859d4659698ea02b79485d585956e0318ac3a92 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/knative-autoscaler@sha256:7c000d9d22c92cdc8b0a32055281f8d9878908ba5c12420c51f8178985d5c91f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/knative-autoscaler@sha256:298bc786a55c759c8682fc15f574c4a6873e229cd27cc25237184e259b87f293 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/knative-autoscaler@sha256:814d5f61c6047cd10a5a026de1dae4db31c67fa09c73e4b728afc2b4e6f21fdb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/knative-autoscaler@sha256:99806c1bef6f440d00cec2e927bd408e2a6f9409bfde4f916740844826657587 |