dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:474bc4fcf301e80b25c90bf5ab7338456e3219558b08ff02646212b5635284c0
Manifest digest:sha256:96310fa9fbfc271df62a632dc01d628254a0e0b5d16f394db69e5c4bff7e1266
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:433ef247f43064e6f817daffda477eae4507b1d3f63383fc81bc900380dd5e69 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:e647971f118f6b2d1f473081f0942b4f4e06db5007e0056ddd674ab128f86c15 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:b1e4fbebacba7139f7cac127c0883e9fef83f64224405cb2fcec42ce5246eb58 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:62d6ad34cd87a4f9498eebda6b27fa78284d59f53126b4f418d13cfe91ae6ab6 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:50fa838eca3028db299eab5ef7827003b86dfb5f020aa9850f340a8f98e5f9dc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:5ae5d008e45ec9ac52300b5c545c5f3d7963e9aca37333ad178fe6b07030e4de |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:66043e8917bf345fb16fbc04c0d84b24fce0375077e71396b8cce80d1ada2570 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:2bbb39d1e18d488515d202940699ab29e9987057a310c65a69820879a19b3296 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:8ee8c601253310e0e61118cf7416a2a4a43890bd285d80a35512cc5d3fa19e8b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:6b837b91da6a0d0be113fff6decd0001061629b4371b3ecbf10b980deea59d26 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:6337bbefc0b76516f7cd11db93b24a8116904b3259707bab8bb0c202141329ea |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:d36dffebd4b659eb2a935b578bd7457a9b0fb16df8e5d4fada8d550b3f07c953 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:797c4b34a9a9c86b6aa63439556a73a8c3483e5c95b670eb22e880e072219369 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:2671d4ba60117277bb44427fc065a7fc8015c3f2d841e8683b06988f43497036 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:590b5643bcd10a8babf9be811cc425132dc3efff91ff3705dd4a0dc344358a8a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:cc8a1225ec783e5bb7631b0cfd9a906025e55937a05d9436b4a03d9f04dacc05 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:37830f6d8ad18371e20b3e36180cec35fc90e124d05c3ff80c4d912997e981b4 |