dhi.io/kube-apiserver
Kubernetes API Server 1.34.x (fips, dev)
1.34-alpine-fips-dev, 1.34-alpine3.24-fips-dev, 1.34.12-alpine-fips-dev, 1.34.12-alpine3.24-fips-dev
sha256:f0b126d09d757f78dcada6bb04debb13abf215ba41cb825d86a10a94cd5321ab
Manifest digest:sha256:c547d15effc22db51a1e07f968a26c4a8aaaa61e3868f7e3b654b862c055c983
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-apiserver:1.34-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-apiserver:1.34-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-apiserver@sha256:cca9365cb7fa0394e6137e52700228c7d02695eb05402a2b51795f7a7166b8bc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-apiserver@sha256:f5a8ea8bcfa469bb47997c3c7fcfd61b05a93c1f9d54a9f89610a46a21b0b4f9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-apiserver@sha256:756be7f19ac77252326f6a26ca94159d4d1f8fb3df41a62ebc6e4bc4c5a569b1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-apiserver@sha256:a35ebc3cd65224fdae1a300bd4d6f0d3026be3035e6647ee6440dea6618d1e14 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-apiserver@sha256:9c50ba7dfef5df3a9a1bee942e6ed3f30f181ecb60dc46358e3608aa4ca077b3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-apiserver@sha256:d4c902023302de00c7ed0110e7c2bd277b1fd5c3fe4a2ca2f1c29edab3a2ff94 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-apiserver@sha256:1263df457e3f0e67432acf8887042ca79265a47f9f31db2570fba00957e9d20a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-apiserver@sha256:df1d45f538583077716f3196ca41a9d7e8e417b69367c628f3246ae34c1b9395 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-apiserver@sha256:c459c1b9e204ab6ffc0bb245bd935d7ed7694ffec3546fa843305ca8e9d5cfaa |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-apiserver@sha256:4b34d7410d2950d9ac7073b63db60b3005f104cdc3b1bfca33e71e4f2e8c310b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-apiserver@sha256:4365504ec67749c18c68508d0b0672755b1d9eb5cc87d771992d5609ba261b49 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-apiserver@sha256:fc7159ac3d7365a91afc358cb49db909f9a6380922e5787ce60dddb74ea749f2 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-apiserver@sha256:862a3095336ade2275f984e0a5bf759541fa02f781b62ba87c8eb1ac5ff10515 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-apiserver@sha256:c96af6d6fa7496c2823abfcb6423fec3f1359ae00564d22109701f20fa427cc8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-apiserver@sha256:e41c91107988a78702fc28d4a99c9349c1228eb439b414dbbddb27cf466beb3e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-apiserver@sha256:9b0d0a9bc83582c49a0b25fbc43192f94d03c241d9ecf15a284d528a172d87e4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-apiserver@sha256:3f1b880ff7e9c315416b848aade6311df2374d63a44d5859347e8acbd779513e |