dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.5-debian-fips-dev, 1.34.5-debian13-fips-dev, 1.34.5-fips-dev
sha256:33cde9c43860bc0a32105bdec563b9bee2a38e4e8f4fee4cdfab9968e8d35ffb
Manifest digest:sha256:3f1a77baf390f90044ccf35c34bbb8413d29ae9121b336cecfe2d7f19b0026e8
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:bbbef6c155cba8b3a010b581f7756a2cff0c5591b87b4997a47a32a70bcbad6c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:05da188c676ac6c74f2efa9ad378afa8e80b4329b09a3fd172c10bee3a11b5ce |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a66e9e3a3685caa5afbcba7acc0b515e65f0529695596cab262b63ea8e38273e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f414b9c002b16051921beda0210d63229b4aac0209c0149b2debec5ad3557326 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:70dbb8cfbd1226274a2974f29f21b9ca75d63119b118404e4ba5e1042cd39595 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:8715e36b111a74b2874ff0dfbf21d4c8e45620f0b156737d2f0bce0dc8dc9cf6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:540ec264adab1ef066791fd8126fbb6fa77c0d8e16fa10fc0f2db83ffc35d87d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a06dd288f4ee8aef777d3d25e9c64bb49c3d813913cc36df25487d0346ef3113 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:44d221f5e5a4822ed1ab364c0466561543180fca7bd7cda0bc6261387d083d73 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f930056073c1306307cd1bd14d7fe8725416cc243a85f3108e1a114ac2d53947 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5800428f568199564147938ff58246d7a63c16ce73b82f844ae6a485b7624aed |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:397c33a70e47b7e80d97a486d9d60d3aa96cd5c974ee91091c573a295749f2de |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:feb9f0ef671abf739599b44b5cf972e1024b4fad717d7ad9ec2145f6dcdda0af |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:7da104171d085c0d04701540a479def40f69e345c232d84ebebbf921c48c6150 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8edda4d88bbc0f33460f13e4786e449997f7cbb602cff186be665971001a2320 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:639f3af685b444aedc50e3c983c5886f596d1b86585465634ed8b6b31eee8f88 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:65cd412c5885cd33b80f8ba9723ce5e6413134c7c041682bb96a80eda3d8dc4e |