dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:17745288422ff0db0215d021115aec9bc38c5b963e049125fd7f4e1435cae4a3
Manifest digest:sha256:2756b64bebfd434f4e53e4c08c240a7c24233ef4ec2955de6e63d27fd89f74ca
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:3d567e3fd950f9a57756f32249c5ab1f0aef0b827e598d1a50de3033daa23bdd |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:1f4086d40015d26051b9182bbcb9ac791f56a8e8b7768cb7b0c34268b727bdbe |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-proxy@sha256:4aa87f0ef4cac52b74410af7174999c078422cf13eef755d049f4c64ffb163e6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:ccc35a54f3f69d5f7340a58e6c6d166c2d6e7b91b27b28913c4b1664ce148c1a |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-proxy@sha256:49d3d0c8c61b18dfe5ebf9c97e6fbbd0f4a0a8ad469bd4b2abb0451682d821ac |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:85c2e2e8953febc4008514349042a047d9a5295499f0a8a5a1e69d0a625caefd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:ead33385cf06cd5bb63d63e95ff7b7e0d25b0114f33aee025fdf6ebf45bbde2a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:161b0e9131deee0173befa9e264f6d990ba6b1314c1888d12d7b227afdd18c53 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:b5d9cf7ab3d3cf135f46f1407e4116239ebaae3fc7e1fd1162b7137bdea7e1a5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:42e1c4a7b77e477d521c6e6350ff7138e453308917b25e70b2b5dea1fb368477 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:45039d88c704665cda142c28a6d65b76e6e2007055b36d7c9586f5336f2556dc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:fc4606546d570fd828f697888f8f1a5c6c8f95651781afae33ae0d64bb94878c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:bd464dd9378a0db6cb52e3465b8757661e034ff18c245e816785e96b0b6f894b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:2bc8ac72823ddc03575817d1225335b96c6647c97a146b4f1fe639846a22e3ff |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:3472f9a1744e31766efea24a5e6ba06543f627f965d7f35e2c7b4e23a7f53709 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:4236d3a956bd0d1c05184b112984e1e90055267cc2a21728698696691dfb487e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:b6e6fd1a9c249440cef12efe3d6cae3869956322a08bd681c19a320824e8f0af |