Sign inSign up
Kubernetes API Server (kube-apiserver)

dhi.io/kube-apiserver

Kubernetes API Server 1.36.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.36-alpine-fips-dev, 1.36-alpine3.24-fips-dev, 1.36.5-alpine-fips-dev, 1.36.5-alpine3.24-fips-dev

Index digest:

sha256:326fbda6051a88c89e8095c8da4214a3f3e45d8e710bb050e2ace3607162b16c

Manifest digest:

sha256:4b2cbc0b2a4febb46347850d9d1f763b9fc0b76a1a55edcee080f62664a496d4

Size

59.07 MB

Last pushed

4 days ago

Vulnerabilities

0
1
0
0
13

Support

Active until Jun 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-apiserver:1-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-apiserver:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-apiserver@sha256:2c02f282570f93de76f6143806819010e5e114af8b50c248813e5c38aff084ba
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-apiserver@sha256:fc702e106ab17636ec7a0ebd5a0014b6d859533b47189b54101d93c73374f48b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-apiserver@sha256:c953ef49466231bc117d4632c2e7629954479078df22607338c9f258ad64f7cf
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-apiserver@sha256:edeeb1b2da93bd62e5b7daaf39b6f818d0c6d5dbc2bdde53decd0034413b3450
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-apiserver@sha256:33b5a8bfc9e1ff35b8d7a1a6c6529756e9dc786fa96ad0400c1372d341a9e402
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-apiserver@sha256:c73d4d19dfd617ed3bc514193835603efd98b97c6bb3463c310e270cd1abd64e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-apiserver@sha256:c7fd27402777708aa2ba19d53c95e43ab38bc5c4a6fec273f9f4b12584f9f7e7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-apiserver@sha256:c971315b2b6382fc72352fbc53d9b2c4616d565fca671bea34e38652840452bc
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-apiserver@sha256:c345ca567d9eb8080a79c24ac1774dc535d6cfba35c92d038547e60920bc456d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-apiserver@sha256:9554573311b2243446ffcd3266f018f2de16fb3af11d7e3979e4fa110e8a7c75
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-apiserver@sha256:ebd9bf1c4923d0fd87bfe1fe4e83f4d91a9e9ffb4bedf234b7909c25d53a45e3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-apiserver@sha256:e296f3b99d63c4bea7dbbb43abe953fe85bc1fe0ce3f349079dc57bc0b5c9a83
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-apiserver@sha256:34fde76e051c7637df68f8e75bfade123a7247443af1d708219301979b06a052
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-apiserver@sha256:14f43f259e69f38789852e7a544984a9fa6c5c761aefd8477d8681a797f334da
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-apiserver@sha256:ecc42c203e80e1403b6248450081ad2f785ef2204e69eb17011609e32e274e35
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-apiserver@sha256:18deca2c65368be91364291e90cc87d0bc8610664b9bfd41be1aff29764ff6c3
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-apiserver@sha256:4025be84e28510d5c3ab7f5fa215afa6590e045706709422cecd10af9e28b133