dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (fips, dev)
1.32-debian-fips-dev, 1.32-debian13-fips-dev, 1.32-fips-dev, 1.32.7-debian-fips-dev, 1.32.7-debian13-fips-dev, 1.32.7-fips-dev
sha256:2174b7130612538a9cd3bb6be1471b7ac2beb8048a2462212b1ccab2ea1a6509
Manifest digest:sha256:8bd103cb1c6f57ca0014de7155005635c14ba332b7e6c4295451f2eb646eb1a6
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:f7c80d898ee804eb757de7936e502a9ab3c462294fa6b1e156075c5a26d8e9f5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c29d5a9bb1029b537323dd83931e998d8ef15bb955bb83ba561b4f34d4b231cb |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:93c54b5b0b144b94e776e98b9fa56881221284cd5f1ac8cfaa97428692304377 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:79d895d2661fca67ca47158013daaac4b9c1fe75454df8572a18d6e4e09554fb |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:2c3de0247b76e0fd70cdd671d4a17773b1f9d2222e352706dd1f4112b342d7e7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:1cea76d707836e867fc56fdacbc54fc0a89f287599ea558f8001c1fea7db7b8d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:1b41bf35c97828921fbd8dc0148b8ae9e9858462863cd025e83df477f76446fc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5dc4419599c688f9ee02d9034a2a006ba7377c579cb3b90bfbbd443fa860b40c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5a28f1b0cb171e12d53b3d2636e58eca1afc988e5ef393b90feaf9aa6607ab63 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:824398f7ba4dd47e6c41332ea1cb2e7bba8d050186142e37885c55b42dc1a0b2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:9597697bb58db9ef9de56f7783cc15462c4a3ff6a36b4e12474cfab617dfe09e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:04e54421bb94777556de95d1e75bb3084c8a29166e2d243f790380d16a592df8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:37a9beb1979eab0cb3369cbae60bcaa6bd29955c34034ce4cc6c52858bd7ce05 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:0ff83c1c3d040722acfb579c8940c45e6ff3fc661487cb3937b8d984f68cf67e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5d80b28b5f58e5071a80a9dc9585e26084bb89f4ed65329c8aa5e4c6dabe6173 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c4cd4a92acb0b5bfe9926bf1382eefefe2b540f5d7da749510b158c217cbfbdd |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:c049afff8358861a96b79f4864c293fc860cc8ffe76afb3ceac73bdf3261a008 |