dhi.io/kube-apiserver
Kubernetes API Server 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.12-debian-dev, 1.34.12-debian13-dev, 1.34.12-dev, v1.34.12-dev
sha256:666171b25763fe5f8f79de34f7653008b98aeca6ec997de8fa2ecad0c4d403b7
Manifest digest:sha256:69fa2f3e4571f3d6100f4c0513ec5145bd153ca65091ad3229e19c1a702e5c31
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-apiserver:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-apiserver:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-apiserver@sha256:35a5fab20b9f228ffcb850baaaa7c010b1f3a7825ae0ef18e15ac017f13cdc74 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-apiserver@sha256:c96278c3d577cd54a59202d1a97017c721cacbf8b87d2e6c3ef0e46a12437537 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-apiserver@sha256:b4d44a2e0ff3ca78442136defeb5f7d651bb9530a15dbebb576bb7d32e351e7f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-apiserver@sha256:944fdb09bf25d1ef901b14ed44340cd89367eb64ffa984e8952ee7f060723267 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-apiserver@sha256:13c7452044da142f98dc0b64df09dd17f21f2fb56fc98ed9ec85ab7840611b52 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-apiserver@sha256:ef58325799ca3b61f99743ae257212b324e620c6329ead9c7d61bcfafc7644d2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-apiserver@sha256:710fa693393dc114a3d4279b82224cedc4740463bdba916e758de090b6bf8ece |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-apiserver@sha256:ee7ed5c11315bbce10227d5fbebad849dab3d8dd80d42c77a0c7652544c07228 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-apiserver@sha256:4c8b275263c9c44e8eed9e833a41b426d28b7188a59d11d95aaa51ca478e6f90 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-apiserver@sha256:bb9176bb38cc155e7bb8bce0753123b12598f084d964467d1d9e0f01a1cab8ce |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-apiserver@sha256:a319dd3dff830b5da50e7cf29d4ed8a94a797ed2fc950ea11f1b337ba887ffa7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-apiserver@sha256:0f6d5441d44e92bb711db66c30aa81cbb421de6d47500e042a8452f643a6f2f8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-apiserver@sha256:793ca4e3f2bf21d84c9f0432b8510fd2bc5746bf68e9fa5f9295a5d9e713723b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-apiserver@sha256:f3401f25de62e38356c0c8caff36265a9ebc56ea291586c2f9027ad1593081b7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-apiserver@sha256:68f436eabea95b9da2289d5a6d613fe5798f3c8ead569cb8fb50c0b78a808d8a |