dhi.io/kube-scheduler
Kubernetes Scheduler 1.34.x (fips)
1.34-debian-fips, 1.34-debian13-fips, 1.34-fips, 1.34.12-debian-fips, 1.34.12-debian13-fips, 1.34.12-fips, v1.34.12-fips
sha256:d9b9b3f32751af0855855c0563bb1714bbc478414efcb064a9c02483d7ba1ac5
Manifest digest:sha256:44206fff144b005ef8d90a71e96afad1ba506b47eea3ece7e9c5c91d573f7653
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-scheduler:1.34-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-scheduler:1.34-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-scheduler@sha256:2a75b0feb2de99248f528dd62ebf5d46d1d12009c04b3e98b291118be8059830 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-scheduler@sha256:40d2e01fd4163f11aed937bb5e767796ae91d487e526b3ed2c640ab97ca23af9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-scheduler@sha256:d28337fcdff0f9b0dfc9c6af298219fb52831a566d9b319c2e76452916876435 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-scheduler@sha256:66d6cfb5cb99a46f57a903b17f6c9b60e5e90b1c0c705d93e05a3b69e8f762d5 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-scheduler@sha256:b12a525a2005c67b75a37b8a10f18b345d01c3de3184cf02b826d16de7751449 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-scheduler@sha256:22f30c21e1fc523560e85529625a435a67423327a365ffc17cdd2b80c4c893ab |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-scheduler@sha256:465655e2bc4ed17a51aa1e07811be4f910b8c0cbe35f0a0b9b1471b0cdb4db61 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-scheduler@sha256:3b16cd645771f87840ec1bd2338b25d4222afb5bf24be3350952ca2c1104447c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-scheduler@sha256:bc6c24ac95a66316db2f706d1a87c3f8eaa6d31774f9ad8121b8ee8d5ca68f17 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-scheduler@sha256:474d82838a9d707f2ea52058cce64c9bbd977df9f132950e13dad65d1129041a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-scheduler@sha256:10cf28e5e8d933fd8cf731abe98eec0bfba98ba9bc24e9ab96ccffe5e468df98 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-scheduler@sha256:66529e3361f4284268b9edb74a6514040afa1588b81a5e4f7a276780176721d5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-scheduler@sha256:140110cdd3a8db7ab4bbb1d643175767ed70e1426439aa370c1843f8fa14779c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-scheduler@sha256:3a6fe26bb86f418ddb6b3f4adb92879e2265dca02405a073f1616c1d4a5609c7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-scheduler@sha256:eca086074b41870fa825ff049c813cbd0c587eea30b630d471c1670c83a078f9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-scheduler@sha256:2213842c95e063044b5e71b5985cdfd6d9aefede295955efb662a4751385b8b2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-scheduler@sha256:8af086e4fdbe8d7986c1cb9807098e8b15f0a20f2d334ee1c5f2e63fe29edf27 |