dhi.io/kube-scheduler
Kubernetes Scheduler 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:c83beb18f9fd63a425e66a0cd6186be47ca18777dd9c0c76dc0f657eb6fd0318
Manifest digest:sha256:a7dec562429ebfd26cd6d9aec67d405d5d3ed7e96efdbf0d9aeffb593c7d34cf
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-scheduler:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-scheduler:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-scheduler@sha256:4e8ebdcefbb73d8e9a3672c95a5336e2b08f66c5a042c104bd4e04b7c57e3c75 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-scheduler@sha256:5cfd4ae132f542455ed23e09d891b667ea0cdc0cadf9d0ac564b7a4c589b8e93 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-scheduler@sha256:99325fbfaa4de3ffee376393d451aa151f6f045e82dff483e9bed2ade4de4095 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-scheduler@sha256:daed17cbaba1fb6ba3ddf83e970af161fcef1368aaa3596fcbc112c97331b594 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-scheduler@sha256:54b330c38a799c0f822c4d77765966940a21f1c972afba9a3dfd4825da4741b3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-scheduler@sha256:3bfb4c0c9d58a1bfbcde9dee443af3aa0b057127ebb8a673df4ef078d9b1cefd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-scheduler@sha256:9657173d8d477c0f7d68160d6511e7542495efda40f195e685a551f038d31573 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-scheduler@sha256:7d9a76c4216816216e1d5358be0c0e773b1219acc853db855268bd0894ccf51c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-scheduler@sha256:acb8cea2a23d4327b4438b592475c9dc8ac88bd514a65da2d2a2b2990b8ae047 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-scheduler@sha256:5c5f6e602e1f3e61ba05c9e245bcb0d6c9fbc44b90278754ba940cb2b084c3fc |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-scheduler@sha256:05b4feaaeb5fbe7b25e588b14c07b124e39a1ee8a00e5678b1b1f095765163be |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-scheduler@sha256:22a50d13da239c9ad3234c1a8bc79fd28bf89da707e7d353c90bb8e86f25b95b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-scheduler@sha256:f44ef533c5119814b38325188cebe26daaee40a4f1a0cf7888dc52dc20aa78a4 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-scheduler@sha256:976aaaf87742b8b07e270542dfc29d69b5fec74a4ee405cf0da4a44209c0ef83 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-scheduler@sha256:a8020ffc00e294462175744bead29f9a2538108a4c2e724f826ef7a4525c8492 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-scheduler@sha256:9f63780365658211a6f5f6f11417995a8ed5012c94d429b8d76438df70f435bc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-scheduler@sha256:7c5dc349788367b9d1e55be7b8eaeab5e2e7ccf179d43767052f4b0a6d6faf12 |