dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.33.x (fips, dev)
1.33-debian-fips-dev, 1.33-debian13-fips-dev, 1.33-fips-dev, 1.33.6-debian-fips-dev, 1.33.6-debian13-fips-dev, 1.33.6-fips-dev
sha256:44af757caf56ca26d8ee5e5bc6670e4dfbf02678d660f43c140b030fbbc99f37
Manifest digest:sha256:2dbd9dd132af1e86e748dbc789ec07542a7373ae3dc59cf6493fb780a4392311
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:5b5aac1650f813f4e06f1a3ffd9278e29e72f7f9cfa0546617349b2116fcf9f9 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:819c60f50cfde6461ca68b50412c88d749c6cfe5384748137491cd2f8c58adf9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:2cde3111f48e339ace7da571e4f31448a63536c44d37400035993335c4430eba |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b0b06d7e97190f7e5a77176ca3823439175182153431b3958d2cd3bfec651edf |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a2a5fc9fa353d75f511f5cb2f4de631aa9b2bcaa6a32f39c0f919eade8d055d7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:a14756861b40be56b42864cbb26e1d4b5552e9926b9482ffc9a196956b3515bd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:4a2985024ddf40cba3e024e82319381ee7b3203b2be52e8f24d1b552343b1ea2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:25e51f1c904106b5361bff03bea3ca4fc529327f822b55d01351f4ac31a5225e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:07a874ec272248f4f20410bee3c4c9608e37b84529fc70a42964738fe72e63ff |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:25bde765811d3731cd0eeb496d77fe5858ed1c1db6f44722b80ca7477f0cc4ed |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b54ca776945ef9266130a4432a99699c09f6e1fb9c2f7be65ea636c461f38f1d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f66f6c558aeee51cf43b49bbe401dec510bf5415f3607adf6426041118cf6380 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:122af32eecbdaca9818ace66eaa569919e647d821f3cc751d189b5affd225f16 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:c95e133ac3a8b0d0a8c10030b1c2db5e9a998fc689ceb2de9685a4c3e7bd8a39 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:85e64a5fc274b91c3d6d10fe21dd2ffabbfb51c16c1a97cd9e7b956443a32b9d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8c865767a2f588cffe0058aaba6e48ea7a61974f34bf37ef5bcb7869f3523028 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:a6242637827451b1ddc3d22f001c264c0c2803e386ba63a0facd00484a75bf70 |