dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (dev)
1.32-debian-dev, 1.32-debian13-dev, 1.32-dev, 1.32.7-debian-dev, 1.32.7-debian13-dev, 1.32.7-dev
sha256:c10ed1bdafd83f48e996f90cf26af68fb20cf02e5bc0d65cefd3984dde45d0ba
Manifest digest:sha256:e7470365608073b3a647f092483cb5d6b9da0ea419fd07a0d968069606616876
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:7062b06f01238645b203db41ef494067c4fd11856a9bb29477bebfe65ce756e5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:88bd4d6f4484694b2e9006e566b852cb176f708ed25b7d345fb838e82759244c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f19984cdc4340d7936d9f9983a7947b4c1c70114ada5aaf93973ff8a722333a6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:788e2e3a97f3d699d8b2f8caf364b79aa2c133d41d9febea8967dcdae608c11b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:351c256af2b253c9620aac9b2233c79fe4abb5c8491ac6aedafeee6d282dd577 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:15a3135a4038fc88f1c15c2cf51abcb066b8db77e8dd1da47fe926f54753c22e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ebb93233725d465a48914a7a6705afe0f0fa9f81effc452592982ff01dfa345f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7007fb303f92abf935ce53f46b2cf2db345c1697bc230363b11c5bd55129d307 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:fa3a3e6fb6941a3e688bb90c1b798b591f55bed3252c002eaee496ee80eb75a0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:d0b0d887a069385fafec0eedfb2ac298e8f33b7de15bd0422b06ba944c679188 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:4ce0ade4a52903a77dff29f104a7a62942a6889d571004390cacfd799a22c8b8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:ab77343f0107504ada625ef948e044dbd3c8151aa7828e51129892189e13a447 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a74ceafe8dda9686da38111c6bc978e321e548e46b1bd100cc501c5d200ce0ff |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:2aa56d622d716b7ae102ef68f163af0065cb598422043b9773ddd0d62b341e8e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:5edcd052c1197c8b918c0bb0fd251bead389e6361bb317b2fd303c7146f1293b |