Sign inSign up
Kubernetes Controller Manager (kube-controller-manager)

dhi.io/kube-controller-manager

Kubernetes Controller Manager 1.37.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.37-debian-fips-dev, 1.37-debian13-fips-dev, 1.37-fips-dev, 1.37.1-debian-fips-dev, 1.37.1-debian13-fips-dev, 1.37.1-fips-dev, v1.37.1-fips-dev

Index digest:

sha256:5251b8457d382a2e02d951fe19546d06dc130e1121fb678265eef40246b2318f

Manifest digest:

sha256:89473d3a0642086ab6a92b8326330e748efeaeb4eeec224a9d56091346c37b43

Size

74.51 MB

Last pushed

13 hours ago

Vulnerabilities

1
3
0
1
1

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-controller-manager:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-controller-manager:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-controller-manager@sha256:ebe5b2b6c7774e32adf63f60e542aaa0d2486980845f199e4c36fea5d64bf82e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-controller-manager@sha256:2fc088fedd409a91557a61a85a1dc111145a4c885dd7b6b84cdff38f60d21c26
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-controller-manager@sha256:a3d1039312d02e90e8ba565031b197a273d4a2f8b1c8e2b5f6a2680d7486794c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-controller-manager@sha256:d8ddbe6edd2e7defdf8ca0e401e7d81fb6fc13962ed6cd11f36d5e55a0bd3e2e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-controller-manager@sha256:84c22b99345db01654476cb011a2b29f63fccaed4ba5ef00c3b59f393e5d2962
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-controller-manager@sha256:fd330192557d76c330666542341de22434d155f1b6a0170ba5d064c2649a0c23
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-controller-manager@sha256:3a68b6c40bd53a32cb291ff6daecba190946bb6fc91b169ecf036716854cb49a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-controller-manager@sha256:fdddd036bf26f9cc883759af582a60e32db7530a11db0fec621d8ecc28c6455e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-controller-manager@sha256:cba6d91b7ae114ef034d84413f5da2d71de7e5b1426fe5e946b9dd5f2e6d72ef
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-controller-manager@sha256:0fa92c5e067d363103b06f26ddd4a8ded424af60a7b2e577e93bebc4950deef9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-controller-manager@sha256:9bc9be5a2a8b6a2f28fcb3d9648a942b98f12c9a53150463e5659fcaae9ac4d8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-controller-manager@sha256:a6b897db719e01585556cd4686cfa6d6abd9e686e82afb4e1e68cb8fe5a8e804
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-controller-manager@sha256:44ef88f8d454f45f653a1e584f248d7d8582d0aa41c8353c16e3c98e57394ee5
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-controller-manager@sha256:cd01e965efabbec8474cadba1367ab23401ceb0e786bb980243d607244d57d0c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-controller-manager@sha256:a9064375e949787187eff6fab7eb7723ee34c65b762e6a434776e557fd9142cb
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-controller-manager@sha256:daf419a568a70b28ed0093a9c0f0cc7c8633e415ac7f5e781115be75fe16a4aa
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-controller-manager@sha256:1b32589779941d22a6cf74514ad395290129663bfee0b2e75e51ba5d66c9f7ff