dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x
1.32, 1.32-debian, 1.32-debian13, 1.32.7, 1.32.7-debian, 1.32.7-debian13
sha256:1156bf64f5c916ae6b0f1aec58f45b6f87a13f1688c926f0670e6a550ad21971
Manifest digest:sha256:2fc2abf18088f66a9c353516c7e7e0f805988e553605377b7ea0e6a8a4f47a72
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.322. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:2b5e7c64d3e705d8e37e92d373403f4ef977f20b8d75edbd7f0f69808bb6c2ff |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ab23e75cfb1e62b74d6f5ab57fbc35fa3b5d16a61038db35478f6d12e14c0973 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:aa226c21c0696f9bde65bc667ec42ab947fdeec48d91884902ab559e9723972f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:e396f0e405128fd921676e8f8a0b12cb465f2289a13e562e24adc3390a251cbe |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:1115b9177c2e53cde0e75eebba3d1e5096b89caabd8a67df6108783c062ba64f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ffd69f7f9461e5a0ca04d83b6ca24357a30b584c50fd6ad0312a530c6d4a53eb |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c9775db26aafa023ba24256db7a1b08e0fd3fe18dec180568bdfcedb6b494dec |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:72358035f97a3ce87c54a4ebda47bd7a68e11e8bed74ea306b78ee12c5086d7a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b959bb1d139f9dd5e517c34f077657ceb3c2a611ce56916df4a62926f3c06a5a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ca0593c33b10d82df4e2b7c8ccbcfdfb3371228bc44870de60510679f9fcf01b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:d90893ae63a667ac4611baac3d71c194cd949470f08f65d595fc17c0de6596b4 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:25751f4694642022164917547984e02e81787c2fdbb0386dd463bf58a0a1a931 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7dd8907f5fe1e6889e44e087b26890f10d1c185c7bd24af63cc3c74d6f078313 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:d0d61dfdcb7185fed8769e3495ae147ac7dce4bef9b3ec21b40b41e369fd1406 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:7f9cbb51bbe8224c5164308bb4e80c7b726f9c04682e6d81c95835d5ed016cdf |