dhi.io/kubectl
kubectl 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev
sha256:0097c4389240e4e41cd9aaf50682fa44d88aa34a8100ad0b282c460a581cc51c
Manifest digest:sha256:b251ff1b44825cb6cc0da6c0d8d22fccd727ead18f4fa00e8cf02dff2f95995d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubectl:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubectl:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubectl@sha256:3c08c973e1e11e9089915e5d3eb3add71c174cdc2b22281c3e9188bd18cc3c67 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubectl@sha256:6ecec5f6331f4d55c5d275e629ee044f443052ba397f302b0043abd0d9a729b6 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubectl@sha256:b1bb20be2742ca2c35cae66f7058595ce9d94649c76ed275087398ae0e78766d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubectl@sha256:3694f378c60ef22fa8dce9dd0fc39f8c92a0591341bbfac33aa375df602f8703 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubectl@sha256:a4036e5c85ef52a65ea34ded0eb09de1fbf13d3ee7896220c60542c3abdc6320 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubectl@sha256:5027b9a585117e9b2c9d582f785e613e53f7d449e6881ead6cb9b5290e53208e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubectl@sha256:6da1f90678c0f4cd70640fb18e2ba2e41da74021e45c29ce733e9f80ca76646b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubectl@sha256:b44281d8541b69beb18e5234cc27c80a3e145b1b0f89f299361331c8c8466686 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubectl@sha256:2e83adf400bcc81cf2c371a7a432a613798ed2a6290ad576afe9589ea4618ab9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubectl@sha256:6d87463ba46385a4ec5230670821018d3b18cdd21ccdde1a06c5ba5e837d97da |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubectl@sha256:e7c3926bfbf9e3c8a04d00ae2c7e5b291f65e63b0b4a5853d4ad2cc2e3999daa |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubectl@sha256:8b8d635ac3653af72b2d7415b9f0834a896627d5ee4a5ec7cffa8383eea70ec5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubectl@sha256:b6cfdfdfb949be55d74d52f01f38b0dd97d07bf5ba1108a63703d94c76f12f77 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubectl@sha256:b64d8489403ca009a5335723195d15098ae08dc1e670ac8b068c06338693b1dc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubectl@sha256:823e6f4cc4357e9cceb19680aa8ff3477a442faaa539b5c4bb8e3d92f5c18df7 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubectl@sha256:38004d3eefea7d8973799ea6d2d67bfba34f43544705b33f0b33348c7f80e2db |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubectl@sha256:c1b7bce473f8e79f1c36ed5db815efb8960232d38d7f058311cd71e109c497d0 |