dhi.io/kubectl
kubectl 1.34.x
1.34-alpine, 1.34-alpine3.23, 1.34.12-alpine, 1.34.12-alpine3.23
sha256:57dedeb7be92017d3e6a2776e58111d1ade45fb8b2e962b722ac183c3a6289cc
Manifest digest:sha256:0ab0da423b5dabe1650d4db9a935db0f33bf3a6ee002afa6f634cd8afcee609a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubectl:1.34-alpine2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubectl:1.34-alpine --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubectl@sha256:0d107c1abff1e6ceca62ec95d1041d350175e12915d6aee12917f05adb00b626 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubectl@sha256:2e2dd1bb6b5365bb0dec623a519502176a67dcafa464778e7515b66fd4a9fd7f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubectl@sha256:d510f4a68c640b8e2ccd89f8d7a59924f5696100f905345f38193459c867af84 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubectl@sha256:1b8aa4552ad4667303848567ccb1c34936b93fd027b587ae028e02a2fb4a1193 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubectl@sha256:ef5706d6cf0a94014b5c598eb68b1420c0c4d0f860bcdd10980866057a16edf0 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubectl@sha256:611d151fbd7e34148172b039bcb7b3e40291e992398c5b0fc497858c0b1fece3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubectl@sha256:14532dd589be0da48b978fe08f6148336cad4d447b4120d158457c8c9e421983 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubectl@sha256:207f94206cec1a3bac0d88c71915e0a337aad0d1b213fc856bfa9f1c4476f1c8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubectl@sha256:27d5730fcab6dcc2e99e8a63385dd5cf14e47f2271d5942102a8e32019f5dda3 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubectl@sha256:30cf9be4e05e45d18dc6003be9025e5a50d38ce3ee50b0ee7e84a7f201924b4e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubectl@sha256:68e11456c447cead375787e62830a44d10ee987dfba7a46d5e3585f1724a7c4c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubectl@sha256:5dd568a145ae09b172fee6ffb9fd26d3626ea7fa7ba471012bf0d5b857634907 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubectl@sha256:38d72caaea4e21fc40331a894daca3378c2ffed03e76eea3704f6af71387c6b6 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubectl@sha256:6c177547b2b3f6b0c18e22d9168d43cbf3fe1a51358a8e4282bead9c94ecfc31 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubectl@sha256:d8dfab5ef591bb8b08202b95d22a887493ee8150a863663f5dd94d26f5337d8f |