dhi.io/kube-apiserver
Kubernetes API Server 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.12-debian-dev, 1.34.12-debian13-dev, 1.34.12-dev, v1.34.12-dev
sha256:4710bb82be5764edbb730a96810fc6e64a851436a021ede5c774d17963f2a51a
Manifest digest:sha256:3a2a27b3f67a189affb8ca1f881d31f1796e8e61e61fbc229316549391b83f0a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-apiserver:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-apiserver:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-apiserver@sha256:a677a52d658e780a4cf8fbad9dd1cc8aba5c1efc0fbf253be38cbc902e6f5a24 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-apiserver@sha256:dd8be54f807a4c86fddcc8faffe24dd1a697f1c65a6e0bf5b1c0498df1365422 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-apiserver@sha256:8860fcf2cffcb8dbd781bf433c5a29d33c732e4bfa4b8b4eb996ad11369189c7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-apiserver@sha256:0ccbd5c60609b446fedd2fd332621fcc3c8911459bbd1571b7ab0ee7d461dec9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-apiserver@sha256:2759197645faf9ba05820782832f58975b6149074ccd964d362c160c3560241f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-apiserver@sha256:992c045051c818f206507293574757e9236d95aaaf3718ab06991d6ea6404a60 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-apiserver@sha256:4e82a877acd1d17d02f9dada63ff4bb600360ee4978ebc44ca4bb2c3bd010a2f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-apiserver@sha256:b31ae0d7d282e1139112ebd291872ea74811504360752ef9ce227d8efdeddd9e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-apiserver@sha256:ce8cfe030dc82f54da6bd713bfec4073fd26181eec7ccc899237dcfe16cf9bcb |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-apiserver@sha256:a4b3886a48b2d5041df2c48d3bd6431015faca10e532e9d16ccd526cc686b760 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-apiserver@sha256:900dc9bc9fee52ae4f76a91609fec50f34c2323bde2b61ef6992be8a56286753 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-apiserver@sha256:f7bb7c30e70b0ed6e5c6fd15bf9e137b30dc0061f5accc7477b003d9b09e89de |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-apiserver@sha256:d1b3351e2ec967ca55b7178c7668db1c5400b2c1e193a16495a843d89b212f54 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-apiserver@sha256:73ce867f7a0d18f0d1c18500e9dd2d3dbc768dbe9e44712abbf14c9962362b04 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-apiserver@sha256:601dda5839f4567d624af005b98971a4d1634dcf3af97b388f5a2e0f8fffdc2e |