dhi.io/kube-apiserver
Kubernetes API Server 1.34.x (fips, dev)
1.34-alpine-fips-dev, 1.34-alpine3.24-fips-dev, 1.34.12-alpine-fips-dev, 1.34.12-alpine3.24-fips-dev
sha256:f006df806b2b3e389977d2c97814d70dc62fdbb08399cde1f1cd24873cfbe4b9
Manifest digest:sha256:79524ed57f5b993bee0d4b931d13139a5d962dd825cdfb233074cfe029f37be4
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-apiserver:1.34-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-apiserver:1.34-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-apiserver@sha256:04142c2115432ccb4e806f5979562462033488d5a736353d0fed7035891aea59 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-apiserver@sha256:cc5c61b76c3e0b9fbed411e5384b03fa21d001c8cccd60e9fba12ebb259cb8b0 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-apiserver@sha256:080e27b822cc81b30155c784ff4cb5c1d977537da21c44e4d89d51345a1b07da |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-apiserver@sha256:d0e5e18c3299272b6d183b6d9f0ca3204ad09138032ac9eb3702029dfc3d4bc7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-apiserver@sha256:8b49658c1051076060e76f9292a958d989c751b64fd0c6276bbb9dfc39397d25 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-apiserver@sha256:7dc48e026e4431dac70b60f0af376f94c16fa246a6e83c9bd49e6a7cc950ff27 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-apiserver@sha256:cbd8fad50f6cfa3bac6d6b9e299c0ee96b825a539bfa39d53f743c5c8e2e32f6 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-apiserver@sha256:b65a04ebdb871514488e9bc9f49c6b7a0826299af160113048c65e6cf394d163 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-apiserver@sha256:f4c5eacf12338edd9757b3c78606f972eed929033d7c0d4bd8415dc35f489ccf |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-apiserver@sha256:1dec752559da55620b253cab9688bbd2d6e4d4308181bf73213c3b4066fd9857 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-apiserver@sha256:1d5ccf5c36fb7e4c17aa3134ff438d56c4feeca3c24871105603e255fc8f8e8a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-apiserver@sha256:b4b7429eda713909e33e6dd12f65a439d17b194a0fce6f8d35b4e2b30a0c38ec |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-apiserver@sha256:de7d3365ea1c82cab480cec6109abe5a019bc7140df6fa9132cd207a8aa573b8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-apiserver@sha256:61a58fb672d6944cbcb44db89b911887f1af12e7047a13ed1ec78b8832d260f3 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-apiserver@sha256:887e844e3b3de36ee52d57f9a7eab73c43355fefed1a3491225db6f526a48146 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-apiserver@sha256:7074154a791ad95cc0cae305f1052030a385cc2ecb538afdc3811a65586176f6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-apiserver@sha256:98cb83573bd1e99d39c3506754fbc366f13271e3a0c6a3f5c1680798d9eb30a3 |