Sign inSign up
Kubernetes Scheduler (kube-scheduler)

dhi.io/kube-scheduler

Kubernetes Scheduler 1.36.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.36-alpine-fips-dev, 1.36-alpine3.24-fips-dev, 1.36.5-alpine-fips-dev, 1.36.5-alpine3.24-fips-dev

Index digest:

sha256:727796ab4ace63167fd7df163b7e464484f0a6797d74c1c20e1ee49b3ad186dd

Manifest digest:

sha256:207f3d9cb4788746cd504d3b078c4f649526e03f0320d842926b0d0ab0c3639c

Size

42.10 MB

Last pushed

2 days ago

Vulnerabilities

0
0
1
1
0

Support

Active until Jun 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-scheduler:1-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-scheduler:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-scheduler@sha256:41000ca84a33d553fd565c333177a31088a44cb84308e400e4f6bdb5901fe7a8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-scheduler@sha256:c454f407b0067e1522088caab47b0ac6f4251e4bc8b6acd4cfbabc17743a5f08
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-scheduler@sha256:3d963aff5800f003d1b8524547fe8416e711b738f0f9cda58ae5670da40d4d3a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-scheduler@sha256:5f7db7b1227365585bf385ebc89a74cab5b8646751cc83279377dac39a604fba
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-scheduler@sha256:7c6c08fed5284e8f02ebc7a0bc768dde3b47187de6d1ba7a6497f49435da6602
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-scheduler@sha256:8fb6ad86396f8fc8ea178c7d8846f3d56b73e7d1ed4d05c991a81084fb500087
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-scheduler@sha256:d8e98f4598e2491ae6a949a69a80d6e16b7f8730e5874d61d13a3cb72a0cff5c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-scheduler@sha256:04a6acb14e9b1b5a221684ddf15e60b02269cc171dc13498e8595a1ccb5988cc
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-scheduler@sha256:60c06e1fada0028871be09c5dc9cbd161f3561322628fe56fd14128bab777828
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-scheduler@sha256:d7480a55b94803994e1e3a33d0ac2f6da2d90dbd70febb71de1364efdac24479
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-scheduler@sha256:2e58a6b714bdd385bfccd8074922515f9e6753e600c403e7776683d7dde3689c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-scheduler@sha256:4739b0d5ca89bbcbea91f2ba8baee6a109e3573ddf7983054c064b50e4052a4f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-scheduler@sha256:8ced2c5d01c76ea634ad082770c28230371438b6fe96f6adaaba61363c4965fb
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-scheduler@sha256:ee4cae3fa709ee15f7b05f09a0ebd68c1ae2e1f3d3a10f6397412544f018ff40
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-scheduler@sha256:810dd265d3ad7567f940d61430702a75677757aeb9adab2548b6cf9c22419447
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-scheduler@sha256:07a3d242c21a3608768223555716567dfed9c89381ce00a95e097de219398f7c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-scheduler@sha256:59f4caba5fee0533aa4320c7039fb38492fd9ec75c1c0d15c380b80da129e058