dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.33.x (fips, dev)
1.33-debian-fips-dev, 1.33-debian13-fips-dev, 1.33-fips-dev, 1.33.6-debian-fips-dev, 1.33.6-debian13-fips-dev, 1.33.6-fips-dev
sha256:9e7a5644ab5f94557043cbf0444889c9aed704cd3fcd174ddcf2e4d32c85a67a
Manifest digest:sha256:cac0c49b102993c100a5d75d8dad4bae27c67b9aaea03ed5a05795d6f2377059
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:d62de864c21ea60457b9cb811e0788fa5bde1876cfa4fc055a3804ec01fa0156 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:da92790576f8e8575f10ba572f7835ff75085a85b0d2179f72a6013cb1b3d13e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ce9e2294cd787ae668a6a044aa32e33a9d84bfb43c17fcc94be9c6e4efce9fc6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c7be1e43f059396e1dc46aa9773de5bf603882df32cdeb008e8ba85de11215ce |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:d8c85766faac2ee7a7648fc7b0cd8ef045441d2e9164bdfe4497b96f2f1f4170 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:ce65bceeca0a68962a0692dbacb9d28d6f786ce7a28f83f56d022dcb4cbcce06 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:7befb5ab48b4ea86be1f3646e6b92e8889a3c38fa1f21093e3953722db9941b8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c7c03cca1c92bb68c3421be723c9734e89ea2f02d456af49d6e11a2264165809 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:332c050dc9da450514aee6c83cbe9b8a0893362bcb2e398fcc520f05df4451bc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:cd7047e3ea81707b71dde3535752fc43934e918d4890188a63d72790bfab46b7 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b40a67c09a0f3a5eadc57d8970072dce40ca2b9b33c3976d41648beb03556494 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:bcbb52f66708393d0735db3ab04c19dae79aaa48632318fe998e766e4c50af17 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:2566cb431d5395594627f1f1f1709df4ecf49aa0677aae84609834eb26af2c39 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:7053e59fa6ecf7789021927b5aa916bb9bdd5d42390bfcac4ebacd51610c97b4 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1ffbdb9d3b2e7f721825837e6224b9b101df91343e1e72304282d93e7e678ddd |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:2433f90db237d9145be970006734cc0f165fb5e800688aa0736a46b1c686a5bf |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:c5bf06b18429618e52ac934092e3eeee279a7c5503452b1ab95e98bf4e15a781 |