dhi.io/kube-scheduler
Kubernetes Scheduler 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:2f514458a273c59b366e3bf1bbd78fb944dab6c99ee97401e0f1bdedcccc9240
Manifest digest:sha256:29a4d77d3ad3ced7dfcb376cc4f84950d790d8529a80466148624b7293c6ffb3
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-scheduler:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-scheduler:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-scheduler@sha256:b0eb3efb1765a11bbdf17f361369fe30f7aca03d26454456b9867e7ca90438fc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-scheduler@sha256:1751f98d6ecc93e73df020f1266e274ff9f8f92762d12a14c601ed6e3fbf0884 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-scheduler@sha256:95ce9116bdf7f424a1771c99239d3964cb3d526746a5ab024af70eee148a2d72 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-scheduler@sha256:b723b8f4246d8fb4d0f436675f1aa2fb572bd28f9b1d427fe458ba492e287d35 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-scheduler@sha256:3b3637c771fc4781d48a919a9c875ae403bc7361b6a2553eecfb4216d243d8bc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-scheduler@sha256:c85cf7090325169b3ed7ec683721f2201179dac0cd589e7283c4a6b61d4e56d0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-scheduler@sha256:4f9cc4c74f52bdb121a3bbb0a8512277ee00a1c56197410ee49b329a8e599837 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-scheduler@sha256:d35ee69a33d6822fde3c2e7c049e28e2e02d8d753150ca3824ec217b0b0d506b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-scheduler@sha256:cda6b22c8e399cc1ca223c4a033c3782aa5fbdefadc2684c8a0b44b7f65504d6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-scheduler@sha256:09331e5009ad2809f196504e2931bbe65c26cef4e36fdfbe2a2393eb3f6a2cac |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-scheduler@sha256:e2ccaf5af33417c8b6cd6bbcf9a95b0e0abdd76f2444c52b3bbbdb2acf3e4f35 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-scheduler@sha256:18ebd83f77b66cfea185c172ac57ae968419e2c27b8c6ff844327b359edf148f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-scheduler@sha256:d489cfa33138df2a736e1a2087c3e572125f46084add85e846403e205199f3f3 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-scheduler@sha256:139a3cfa43ebd6730fbca2312479267c39f3457d12fab5ed9a993c1a5c9ca64b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-scheduler@sha256:959a37bc09abbf333952d3ccf2387aa9d5b47794c5c87d781aebdf7869c10272 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-scheduler@sha256:877ae8847524215bfd2bc9fc98aa4f8458b4a0572d6109462eba4c49d207ea83 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-scheduler@sha256:84a8691752ae6644ee7610c3e45b1721d0247c2e5f5282c8bcb97c905eaed4d6 |