dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev, v1.34.13-dev
sha256:e77e33b9eb3d8bd973c3f36ba75dbab1f387f2fd4b6897dc1eea8c185a05dd2d
Manifest digest:sha256:1e54e5c0a909ac41a298959f71853bab31977f9c9e40b7f0f67de84717b5fbea
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:b19cd3718594b9e7d5bc95e0c633c8190fab96e3eefac19eee4134015d10d08b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:a1c9450934fb143e8798ca1e77fe241b498211a4359c9b660af5211188670e0e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:44c3e58cb2037b35ddc38fb6379ab4cc57f0aae0bd6a3323b7fddf663284f32d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:fa9b1e605bbdd2c124ced4607e424921b118744a3e0ff1c23c39d4862f73c91e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:0eadf0f22edc424d0310df9cc3f47b4ddd97f173683892beb59c563afa29be1b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:434dae0f3e570a10cfc85f9e2f3c8c51c13842d8c9f0e285db4a3b2c48639f9b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:9c3da865a05eeac3b292124db4cfce0c8007ca7b3c6246f9a1f998ff1a23f860 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:05f4f32964dc4dbdd2e6cc33b2ed2f69e8dd86a3246a336c59a885968193372a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:fa7f7e453770115c61ac3e1d8efba70f11d139e8d479c23f5bdeecc5e6cc0bb6 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:f1423277a1dddbad74ec72b3ea72470403d195bd522529984f99470419331168 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:fd14e9ffb68c241afe28e1a904dc6f86b755a0badc0819515315d99ec85bfe52 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:d1c4eeb6b6bd946b564d42b5be94ee0bbadc784b722cc02f97d2001ad85b68bb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:d3d635341474ee2d2b14074106eb96e6c1a0e1a1f89b39b216bc84beab54cac3 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:db17d5812157aec2704aa4e0cf80c71666f807ce7ced1f25d65029e17c1906e1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:023890559c86618b43b111b5abb8c00fae2e276e93c57b2ced1b2d23896a4811 |