dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (fips)
1.32-debian-fips, 1.32-debian13-fips, 1.32-fips, 1.32.7-debian-fips, 1.32.7-debian13-fips, 1.32.7-fips
sha256:57ccda8d42caec614c969d9f14871de6011e52c65d4a39358f2f028ad3d65aa5
Manifest digest:sha256:ee364514385f759857a8f062190b8584e00b3b8b4a9e0f1dd0f5af6b6c81987f
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:e18fe69d82b3dc52025e0f26a964a668b882965d521aeb12a52b4391d838246e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f7eeb61b65374261c6171b08baab7d90142b0551a068f8a1245a3099e9678910 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:635857089f430303ec0a4f2afd41dbd38d15f3199a7cb76ddb641c634ca2e9ed |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:cc276c56fe512f4ff5452ada4b8afc75ddfe291f07d781d0e4af9760cbe3a2d9 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:6d7a33a4b6b22981c8a8ae7e21f70f692c654a39f3f182fdc6fb40e1a17a82c4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:5fae8c2b9ac1bf599b1444bd152053aeba00a89f4396bc64de3deaada228bae0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:2ed2351ae9f0dfab2dc267e10f6cfece210331ae503d9fee660f7cdcec8c095d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ade4d894191df26d25d0b1499dfa1a9937131c11d2e1168203d13026314abfa3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:41e8691db2d2e025db7d916524440440d208b6d98df214e6ff09a1cc12a6b354 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e79c16ea26078b9094b43565d2ebc2bc09eed680b457ce40e2f0b8fbe601f0a1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:2283e14c82c59f28bbdf22fbc966ba8d1af06fa4b156613880fc59b64b37c229 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c051c3e5c2381ce46dd16a1efdae431dcb25a3d24cb9c4ef003ddaf54b5abc8e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:4267577fd1965986757c258a82e0cba33317147dc4f93a3427c9f398c895e433 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:e700afac75ed1c71ed93564edbd520cba89702b91cf065dcbbde6b34417b9e05 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:3f622aaf0566ffeec86079363193a60d708cb82a81d876676266493ffc0890ba |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ed3effbb55c19c8057dcf0de7b521027ef1683fea4cf6861347eb8040f877945 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:cfd4fb6b7ca25c2febe43620712638fd69fabd34b16ce54d7e5b493ef219d3ca |