Sign inSign up
Kubernetes Scheduler (kube-scheduler)

dhi.io/kube-scheduler

Kubernetes Scheduler 1.37.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.37-debian-fips, 1.37-debian13-fips, 1.37-fips, 1.37.1-debian-fips, 1.37.1-debian13-fips, 1.37.1-fips, v1.37.1-fips

Index digest:

sha256:46a7a55a3b5cdba91c857d3b08c6b1162d90bd048c303c7af77c3f53887d10f8

Manifest digest:

sha256:948d427b55bc0b5c72bb6eb363e6a23aa7b4c4da115fb581874043d5f994d687

Size

27.82 MB

Last pushed

2 days ago

Vulnerabilities

1
3
0
0
1

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-scheduler:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-scheduler:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-scheduler@sha256:6fb57dcade0ad079191a8e2718a839b65a9536dcb66b41524de5bc9a90b76ed2
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-scheduler@sha256:0434329d23d8ad6d726913d40471271f3875e1cecdea89269bdc31960719a3de
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-scheduler@sha256:823c7bc6897e9e1fd8c4bad7973b31ea614a16deb22d7aab31506cbb25c6cab2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-scheduler@sha256:ee3fd70f8c229e7e59e71cb176da31dea51edbc1df2df530672e4ba50a330a23
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-scheduler@sha256:b0ad04c82794c0aa399b0d8d66c7fbebb674fd2bf9c44be9b21c89e89bede58b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-scheduler@sha256:a12f1c48661501fb61cbc1b0ff5a68b671fe87a9d5ea108289a0680c5c1210e2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-scheduler@sha256:71c70428868da794b04c543ef3f0040a94ea4e3fd7aab1e4b599d1d12fe676d6
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-scheduler@sha256:003a3c121ec6f018ab7475771843d68d3a4b4009237cc0b75294aebebf7b5785
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-scheduler@sha256:0c053b962de979466703dd9a95c0a4fb80ce3b15063ac4afefaf3ca6209ae7e0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-scheduler@sha256:5265de3be536385dfd8006688659aebdf65510178c10284cd14bac5521cb5947
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-scheduler@sha256:9622a53f2b70441dca0e9dd475409da9460dbf372007d7375c4f10c42645ef63
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-scheduler@sha256:90a399a8de3b18a3c4d21d7731712194ab5f331b837d8d227f7334e094ecc0e1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-scheduler@sha256:c2d22bd7f9fa86f42fd704c515e39287c9cce4ad6ff40e36eca591ce18070fc1
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-scheduler@sha256:5cfd6445bdee28ccab63d011315e2bde66449e2606598c9e78680b098ca6dc35
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-scheduler@sha256:060c08bed580e16ec698b296409bc15cae5c43d6ae6b8a93204fac5dfdf1e373
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-scheduler@sha256:07b6ecf7857acb671dcdaa9a5455528f04e302261a019e7fd267245833b62328
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-scheduler@sha256:7d4fc2e7dfb8ee222b66b8b6c5d119f89f63c03e6adc2321652b8feeb60bb380