dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.12-debian-dev, 1.34.12-debian13-dev, 1.34.12-dev, v1.34.12-dev
sha256:4040288a663e8cedc799cfb5149cb0fc4c0a1c4dc6c33b1eafcfdef55b7d787b
Manifest digest:sha256:aecbe0c2b616deb77ceb0dfbf1e2133ec49ab2c9f40a7a1101dea2a87b26d334
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:1002758b6a05a10e39369621c3279fa275d68abeba92c8286766922249864027 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:f551b5d511d680195f3a1cd137579e749cd2795ed7636b40ad60cb468c5542bd |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:31b003ccb99457643391eefc7b27c93f93a466c16cedcdb139e405b863b21bea |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:9016729c16eeb265d0d444df33aeb62c59645f12e1909a9050561d3688f415aa |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:079b80e2cc945ba6c26550dbfe51bed7574ec28dfe97d8329b40b44e39f80b18 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:d7e17b9c03fb1fb55300dd05049cfccc9a53d2750ecabebb4d93a6809f7eebdf |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:ff2e0ed61fad59d09e25261e0187b6b4b74e8a940e59df66c886e9ee3b5769cc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:5a47d0cac4593ea6d34da29b1765706f029d13ec5cb89b7f587a4b1bc8d72883 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:e35c2ebcfe99fef59ced48cdc80c79945a721fc569b1292194cae6e32840184b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:0b710be4b8c104e9849b7e98453f950d4473877c7ce7f119c6de9424c8636fa7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:2076de8b77c5674929bb80ed842329c5bdc72e8dac21f6a1ece22d74ec0bf5c8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:09f83d4071cb99f9c5516faf804ef9672a29a4cc9109623e32c0f01a8d1740ca |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:f4c28ba1b15bdf98f0337c42de33705eb558aeffd8af6a2daca327ea1906f7f3 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:cab27044b0ea7db4c2071c74a48c492165caadb4e438056d008159063d5e892b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:bcf653015541e61ef48cff04dc574b55c63fb17fa8096262d41cc6deff0892b5 |