dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:e1a4643abed4799ccf8419800da68d168520b09d1c0b8ef54db9fe53d5a80ca9
Manifest digest:sha256:dd1c24c39d372f8e5c745dd84bb1bd10f1462667bc04264dabb874548ed2a5b2
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:7d1d5a8a11e59fe6572c0a5423768fbdc9f0a814ac754b104677cc0c387fb6d3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:3922d04ddebd3f2c2af91f12a2b10df8c27f1dbb3c810992c5b56c031ddce808 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:47f7313f6cd89758d6d321b05ccbfc35c5029f06de472f946cc74c964c36f009 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:82f7b5a43fe70688568ec3fdc2e47418f54fbb2302a88419f41d037ef2e53279 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:824e96039b52030a685225e6895a8cbba80904053f611ed332add3971c31cba2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:12d9f7777429bea7cd2b2101382f057b82af37b9e9d6b25849eb92122987fe9f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:63f43ffd8acb17dda53ce147abc6767f4c803b9393714edefebdee03b864d179 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:44e41236eb89b37a6b6544295b494a8fc3aeff7e476dfd99b8eda5cd552a8710 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:471fcabead4b29ce5de259b98a45874b4216f2586f9b5d88a77a969baba40a57 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:babda457eb97dfdc2b10f5c488682dac9d1357432c926f804c047c6c40393aa1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:da2cbc59aeaee4c9e713eb8cf7a887b17c6b8246731d42f580f7d1f5ee12c232 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:4ea098b0a1203322127132a2693475e95e7006e57fa7ced81b8f952e52f42d55 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:bdf86e487ef0caad94e81c2426f7863be71dae6102fa029301bfa89bb9f4b854 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:a77ea3c65688eba33d2ef1598ee238632413f66d1043e2e6c7d6736cf3a0963f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:fa2df29f265f8329d8cb7ae500f3fc301983f6233ea000ff0ab810a0814307e1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:07ec2e09ef07e8f47f57652f1fac5f3f0a0d2e29a5115d9a82b5cd9f90fc56df |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:b9fcef121caabc4399440e60a789fb87065d618f52d61f11dc69fd1b5e785c3d |