dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x
1.32, 1.32-debian, 1.32-debian13, 1.32.7, 1.32.7-debian, 1.32.7-debian13
sha256:cab0d4070124e1b39e86a7229e6ece84bfedb5283dc1d4510b490864ed8e9738
Manifest digest:sha256:4251c062f2a1da1a8f25b750eaf0ae49321246b9a7ee7d2119b67558eb35560b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.322. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:644ce5f787d39837660b853a5fbfd7aaee2cf451d41b572c32f6b7c05f1f8ac5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1f1c3ba32d4520e204029d709b71fdd0344d9072509b84ebe9ce84a21dbdd243 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f2c3a1e45c3e8c24eea08ab952e9a7fc90254957f191f459d203a72b22024145 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:0ca3dbfff098a5e70c23a2cc930c4ad893cc4a510afcec35e19f213a8fe7729e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:799c340aa88d17445a2efbdfe4b3298bc533f9d8048a5ff6dd45a44c8a2f4c50 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e489c64eaa85a22f02d30f408aeb000f7306dac8755ad1f33b97ea451d9547be |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5ab43152f45b2a85b0de4f0ecef834911fd3a6b174c493634e95e128492bb3de |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:9e5c87d49d459db469cf4b2b0c756cc09599a1d092aaea23074c0ac639c69826 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e6bce893ad1e39e97d6e37fa229dc74bbf11279b036c2da1d8847078c734702c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:75787ca4d3c7c0a32d3bd91b9b2d7a7a7c78260f73ba099d72d4f3a50627f519 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:daec17bba3cae1a4d612fb3b7b41cbbd31b1c6ef9789ae471eee662ec61bc15c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:0ccbab12000a352b069c82937c63a2f76d1e0f99c725cef7c17796f6f643dbb0 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b8b5c1be4383f870ed3a4af9707d3b30efef2952c1fd87fabfdc7cac846fe1aa |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:d78a5be796b3fc7d7d420e8113b54d0cd9965c4e3c46c4f396f7d002c9abcc38 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:87c1b80bbc1651d5130a1df97118ef437fa0cd9e6032c8b37758fe84ad812c1f |