dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.13-debian-fips-dev, 1.34.13-debian13-fips-dev, 1.34.13-fips-dev, v1.34.13-fips-dev
sha256:49753e89002864fe08b62787c233cf227143beb5af36e3e11818dbc2b7a233d1
Manifest digest:sha256:7fe6beb2d636bdba6bedefa7170036d1c29fcd34291d1028c18fc0b0d598801b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:6ce334e821e97ef906dd4810d7cc870f3adab99863a12673b9d2ecc8c70fe935 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:4dbd1df94590e30032f6e48d9fd381e43576bd9b8f7be32ded0708d079695954 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:3dc4974407894eb51ef6fd5a31a8e37c20120bdb029b37c5eaa3d5476c9935b2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:a85e6a9f01949629ea9fe0d909f3c082a83d5b9379e6af1cc760081ae49dbed8 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:27a8abb5c4ac89a133d2e196a9ec70d3533c431398efa7b0ec8156bc659779ba |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:4b634836c7777fb0763a6647df80785e306af9045d32b58ab296e84cfc3f03e2 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:8b0a24619368510274dd4a7135918e8390695e650ece34fa47ed79c2100f433d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:0281f0cf11b1c4a784f934566842808ced0aabeff0fe0e1a5ef1379103db32b2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:eaf4b66d436333584e2ee79c24b97d20a392f4cb486a50e81a4520ebd594e9c4 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:c0cd64fade775ab0a5bfc54ad10c8fa29d465ae56d45839b4a0d3485f8e4f792 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:b3d9034ed0bbb0b33316b7e5c119de8a9f858879734aacb9b44c90d5abb72157 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:e43d9cc2d6549fbbd6d5423e9e93010bd96f6ab7e1d92643705e9b1887ed64de |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:c472c610454254eb0f8ae68c04ccd9ec7c4c6853062ff398dc479924a9172260 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:7db2b212e8b8d44817714b156eed06bd82c8387b96a35d74a6f81521d7e2847d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:a470e6c78de0f7aa1ccf34f9b8123957a961a3d1716390db6a182d85ff611a1d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:7f48620717a7a4f2dd19951f9c33572d121faf7c1992ed7e3f3eac594acb46cb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:4420661a19a2bace59c2f65f1503c5df9613dbe8506863d2f9db6d42bd73169a |