dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.33.x (fips, dev)
1.33-debian-fips-dev, 1.33-debian13-fips-dev, 1.33-fips-dev, 1.33.6-debian-fips-dev, 1.33.6-debian13-fips-dev, 1.33.6-fips-dev
sha256:95de495250cbd1a6946c151337eeed52a9d98258340e8c0c37d11aae2f9e12c3
Manifest digest:sha256:4a6666a1e1b593407b39fec4c7cfdc3f32e92bbff01122cfc2e82a2fc09d0c22
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:ce6b77cc76a901949b4b7e038802ec4d7256243b7b9fb0e338b728cca0498406 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:6b401ec5fca5579989a2bb8441b8940bece3829ab52f6d4445a7093dfd836164 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e64a5e2550fc2afabf5ce3b1b8fd23771f5dc26744fc5b42e1ebf24d2e212ae7 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b78f2b41240a0221192bec2372fccb69730cafe3a94417044c84f5d056a2e88f |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:66408662c92ccdd57d70e377022498f3e002a64f407843c0ea763ca4b3e35008 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:ae860dffc63d4c7c2a52e1dbf29e2b816974f02e9f8961a3fd1d98dc49eda757 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:95fff1c2cb5f6df2c596b34ea3ad538975b633c7f39d536955c69a835c2cebdc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7ad3fc988195ca6cc5e282345c75b163850ceee2ddf2aa4cd64e9a1b249596e4 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:9898de7bcbf29e8e263a93947fdf5f38180467f2e93252aa93d4b548cf39b4e7 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f911acddc055949579ffea7e20eb5be41a0d151a7d00266f29d07dd1633efe74 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1a76ce75481107e91199b656e6ece107fa65c7bbda85adfa465fa6dc698e2cb5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:965d93321c792ee5e2b2178b4c8dedd030dc4e49a23a53d09f6219e174aaeec2 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ea1931e02db8bd207ecca2723605bbae7e6a4a2255603387c9ee80f7a42cfbb5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:325a3eea527becaf588850b7063323d81a0e4c7963e60a3c2665b90dc4b87bcd |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ccc40ee561254523ae0c32368dfd79521f8a48f82ee6e17729fc908e9d213a91 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:0d70e803412d9b08601f4f44d835d2d0ab8717886021296a6d6376a5e8b120aa |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:4134e644eb2a04f46b20b68167150d8cc10c873f0f772c063ea446fbe3f36d53 |