dhi.io/kubectl
kubectl 1.34.x (dev)
1.34-alpine-dev, 1.34-alpine3.23-dev, 1.34.12-alpine-dev, 1.34.12-alpine3.23-dev
sha256:a5f5f1f7d518b040d62b883cee6c7fff7fd22d201113ee32c42bffa48b085a32
Manifest digest:sha256:e5db3b366ec687388d625f30f32d523dd4315982e574db1beb45540353fd3ed3
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubectl:1.34-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubectl:1.34-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubectl@sha256:504303b6e33274480ad65946da7a375da67d920fd3866898d4adc1b6e6536b07 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubectl@sha256:449d0986764bb79faaf4e55bf386dd79d02cd4dc6a975b8b00127f12dd6656a1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubectl@sha256:0f3437f646ac2fda37bccca9620784735459c80656181671d9baff969e5b45f5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubectl@sha256:3ed16c6a8a0b93db246e6d9d9ceee88f0549ed258cdf8106ee36b8680fed1c33 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubectl@sha256:1e7047a87bbb2ee68df7662d6be759fb30e98bac657cf3ce2e7f6d3595d1fc88 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubectl@sha256:146b37e083a0cb454ad3cc96147b5cc16502b5831584a84413661d0ec89978cc |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubectl@sha256:910319a50f65e46af1da1ea9384a148052f966818e2b784827169ebf3afefebd |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubectl@sha256:793f84e947f770d35cfac15159464b2a1751181b22acf0ab5d6faa3c7613cb6e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubectl@sha256:16ce1e32c4a0566b607a0137af7ee091755ad280528b9b30f14a06135438a807 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubectl@sha256:98863157e8fe97f82300158d71a3c521f7321e4de689ce54959295cc683b78c7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubectl@sha256:60c0778e5b58a96df3fce731b9116a9fd5cf8edb6ec8e87a90da4d5cffe6e3a1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubectl@sha256:3b4d178c0e05ebe9447e434b89ba7e043fb60332ff9a3d65e75cf58c5f40c4a0 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubectl@sha256:0005994bb27578dd5c89a9254ade3a90873ce8723103fe381202efe43dc8d589 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubectl@sha256:d2f2992fa34ab6f2820f7738d29a976ba5e89e876b867748f470831d40c4c5d1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubectl@sha256:03c3b2418c5ac63bf4cba2948a5982cc1b419d40d22e2bee84063ab04be9f46d |