dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (dev)
1.34-alpine-dev, 1.34-alpine3.24-dev, 1.34.12-alpine-dev, 1.34.12-alpine3.24-dev
sha256:ce18eef908726db1bc2e8189d3c0759b4e2a4b0af15946f6d5c4f1f8b7e2ed2d
Manifest digest:sha256:e143f77338099f1473c05323dae37242067f3dbf159af1eba8a4ed05454ee2be
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:a27279b66892585c81b228c9d1868ed18ef35da2125168f8ef5eed42ce7e4376 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:f07c979156a03dd6a76de598e4d8c23a6adef0d15832acd3082cd854f1023931 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:ee6c585ebb06c642758eb0e33b851f2c7261a30ddfa56f3defdfb185869d6b2a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:377b3f6fdd0622bed0abe2def174490f59ed0a50236c5ef268b578d492d7acf1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:9742ab6f71e3d7bb2374d3340ba393459ef6f97140893f01afb4113d49d63fda |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:cb25092e57c10cb4085d7e41a6ee79f8ef39bcb0c1a21d2c2e5a1fc273bbaff2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:10191a9c537170f29c680b4bc2389fde179e7a01169faceb2ad03b2407bf6bf3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:6601eb5ed1cb46f68e64e44804cb05bc17ef1d17c2b4cb7b6b7764ff432c6903 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:748e57f9185100a91e049998b77cd0bd60fab8aed73e4a711e89b0897cbd4432 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:9b63fe76d8396d950ba7c28215258f4cd87c14500bda4902bc498a87574a87cc |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:a9560d68ac9e37dcee501d0adb9081c2a40ccf84ad480b1312709feb11d17a4a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:484c636d6b3656c2e6ae3272099a89b2f4c834a0737aa9952950dc40fcb85c0e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:9343fbd17599f680600b5ba4dd36d5147d9265c65323af82096437e6d13fa898 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:084f32cc96411625d380bc67f3904078566525846dee526c8b2a36564811a8ff |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:2266fd4f90bade8d67377e716e86a92c039fdc38812ef5a25824f05e9a837487 |