dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev, v1.34.13-dev
sha256:720ba740fb0d428d261c6f5b00230841c8b0badf3464a732964cea77f8e79013
Manifest digest:sha256:f5af514300d8f7202f4c3eb7c8e1cd06265b234c5e5a7f10bb4662c5620eeaf1
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:75afbd83512b12944d988e879618312e40b559c7148583dbd05f70fd379f7b3a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:d0bb0c074bc5a367bed011b958cabee9894cba1f54b0830d31b106b8337641f0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:85f7463df4d2ef4f7e1f4014777465bffbc4f4769549fcb0d9c6b37ebec64fb6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:8b0e0fb9c90f040f5828085ab1aacf13c4a7f300b5baaaecfb07921d0e2cf1fc |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:b810e156ae643c186444dd980eb067602a9ad9ff86e606e7b9557440a6a16e40 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:4cb30c3bd33afb3bf1657c6191b385c966f32cfd9d34d2f0cbc3daa809fe34a2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:4a8279d45124d25e74d1b71cab8f7de68748fe9057c9802455bb152e2685a2af |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:d79696d9b819a7c67201fed9b1f52cb9a4ddc86d9e15cee3c8e292acd46de23b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:c4240df1d27cf727ab801a099c79cf73f29128a53f1f1053bc2d946608e28756 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:cd5295000f2ec1d107e516a9eb71cc4b3d8e91d38e7cbd6760fa94873596ae8d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:a58d0a873ee457e120d2acd3f4d1c510c6b1b7ba8f77928e3b1da63b924e31a7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:c6ef615868ea43fd75714d49801ddd0235aa641c182f81c7ff817b314ddb0a6b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:2e481885cb4f0721bd6bb3dc530df404b8d2aa1eb381147f775d60abbd13d2e1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:bf5e8af2b05b0e048e034046bb83b105bd97581deaab01c93bbc4cbb77974611 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:092d708527fcdd33e3ee2449b9eafa271c6b7dfc57f0a644ab8a7a0f0be2406d |