Sign inSign up
Kubernetes Scheduler (kube-scheduler)

dhi.io/kube-scheduler

Kubernetes Scheduler 1.36.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.36-alpine-fips-dev, 1.36-alpine3.24-fips-dev, 1.36.5-alpine-fips-dev, 1.36.5-alpine3.24-fips-dev

Index digest:

sha256:a394f56b004e0c938c20ab22c7f7e4d420b44c2bdd2d8617373cdc8f72239d68

Manifest digest:

sha256:3d2e9ee10f6acde34b979a8a9fa3da7fe4e8ebd8da5ed14b2972ab0f18c596a7

Size

42.13 MB

Last pushed

3 hours ago

Vulnerabilities

1
3
0
0
1

Support

Active until Jun 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-scheduler:1-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-scheduler:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-scheduler@sha256:120c4e14126a610f40a2816c7d5323cf41304c4513d2125c6c2895da5dd0bd28
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-scheduler@sha256:c91129ccf96acaa9b5b61280738aa3fabab1f47d59f019063ccb6c3b3d86deb8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-scheduler@sha256:3a1f758c7099e1971d469b7e52f27be8ec10f3b3723c68979133dbcb103473a9
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-scheduler@sha256:a0eefc5e7edbe39ce573b43a7f6202f183f8ebbf26adfe71ccdc326844c49228
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-scheduler@sha256:a86d80faa60e26c525cee2cb8a95d044577399b40a8fe699c8e855973696bb89
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-scheduler@sha256:578a968ae0d9bdbe87b07bedcd22b918b99e9578286fa78781aa03f31b842f01
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-scheduler@sha256:10c44c6f58b00c7e80abe97992e0c50ec6962a5a6366f23bed8a2f6539424744
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-scheduler@sha256:15e088444dd8816faaad93e3189a586c8a2e193fbef1c23d24563cec8ae8921a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-scheduler@sha256:d3613d51aea56eb4bce28f169da87e3b1d43f279a368dd046a9ef00ccbedc53b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-scheduler@sha256:1e7d5011b120f72d3570c2cd21df8ec42d769241510a8f4c1a9bc382b3afae05
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-scheduler@sha256:ab2bebaaa7848f7ae53c64d52791dfbfe51cb4c54837f3c4314126fe0f73906b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-scheduler@sha256:3e1d4e9f3560e2629d445401057548572ad00b2a819f3ce4323c12dc3e1e988a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-scheduler@sha256:4f252e129f3aaedfe7dd38a1c818e30abecfd5cc24d9f1dff406008a3bc4ee10
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-scheduler@sha256:810906b51336d1e46794b782eadcae61bb02f884b521f276b8a915d0513177a1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-scheduler@sha256:031f3e687a0fc0576af7890164eb43770296847cf94f10f6d5a94190177e067c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-scheduler@sha256:6969ca51f904ef01021e7a0e93687ecd4a01cc3f2012f40c2b674be4e5ab5088
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-scheduler@sha256:14feb7405780e8807e64981eb7704e03d5bd910fad098684488491cf00319e07