dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:c82f10c1d8e96a8a6db1aa520875192c8d8150ad08379cd44a197b768d308783
Manifest digest:sha256:8714db646a22355c3822b14d73cb199d68589ed2c3abcca4baad625bf804a693
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:2b5b6ef8231a59e78e586fb54ccc0c8818324b226693565f7f834297e25e0461 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:c6034c87ccbffa1559a467575eb12eb6fd46d7f2ca1e3c5b0ff4ec7a6f0780ae |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:07191695bee8fc14ebe04da00c4899fc38e7ea2ba7e3a60ceb8364e990c5692c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:5922abf172faeab7f4e2402ce38823b7fbfa6eb93fe50f06d0e2ca7b36611f66 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:2fc99227909caed5af267daf793e2601e48836c9aceb417d76f500ace72d2012 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:3ac912fe1541d7e66909ae516860fcb4c4e4516bb982173b3d2d7afb1d4d463e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:9f1089b73226de40ffa7494756300bb6f8611aa6ae6d7f11b5302330de121a19 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:25f237473f30e67eecaf28ea0d485918d8909d26e6c0fe9fd6d63c915ec6366e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:1bfd951e7f34d6cf409b55ccabb6d53654a4d3cab34775c4f072f791d403421a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:274460bb84c0452007f4e058e7cdd750ecb3ab5f30bc69f5c1d27f2d0aa20a23 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:d3f619b35323c20338cd0e8c0aa61a69253f88d8aea69e00e59826356fb1ab0d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:e457b3e0df869a4a3c9b22ec577a5b6e79f9af979724be732db9f8df5820e329 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:964648578899bea39df39ff39c28b33e2d85680e03fddfce66a3393ff5e4d27a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:82c507acf74c1f0a28bbc7754988cf665be60f3b69e1902e84d282e2b0b3ca5d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:d4516431bfdaebb4a4a96c989bf277290d4a2e48c8d143dfa0c3f97b6da202dc |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:245f38091d4082ec86a511626a179bb1d956127ebdc3c04772dbeeaced32a28c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:3e241b44f94b0c88ea803d7093d1428f8951dbb294bde13b4518c122cf64e010 |