dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.34.x (fips)
1.34-debian-fips, 1.34-debian13-fips, 1.34-fips, 1.34.5-debian-fips, 1.34.5-debian13-fips, 1.34.5-fips
sha256:e9bafcbf139d67121ba0bd07b0c7aba260f960df00560baec6dbb2629ea8591d
Manifest digest:sha256:95c28123eed7dea7bb380dcf4046f63bdd0dfae09dcb89629b1f770d73ccb5f8
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.34-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.34-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:72c95166dd3723263abae03a757f75eca2ed52db1773149ffb105312874d4a7e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:066ca621b88e043d878508423e19229db23120b0e54f54bc5423d5110c435966 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:0040d65030dac584de1a708712b5656e59bb0f641c9f36d2850154788a863994 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:0c37921ad73005517f627b44c296dc303c41a89621d997d5fc264e7487634757 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8ff14c54a5aaab2f1b89981e5188c0a78a47dadc44a80825da465f8de538c477 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:e1445eac9d1c68561b809f0084a3ab1fe521e39d7b19f59ba4de6a2193799370 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:7214401341f6bd99c36610f9a41af514d73288dc0faab13ee45a7e02260bef86 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:d8241a1a6b3082543aca378254e7825dd28b11f4e9d467582c2c62d2f6238367 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:604aeff79495a3ca7a5e22c87afae3fa23b963bc133ab624b0395b609db7edcf |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e03240a6721ca5e9ec21b137aad44cd9dd5cb6e585070a3a4df38038e46bd8d4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:acf52dcf53dadd72742fbf439e8871cd7f3eaf17ccc5ca104f539d7400d1a0ac |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8df57aa6a6c2c4b9174a00bc948de7f3a0e72609a5b1047a1dfd305af93479e5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b2b56d305aa381d364d22ab49c106c204dac3539d2d1cabf060e0c900eb74780 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:a6d77c2472e42bf22441b620eba8b7cb5838362c3283c1f8c06a2b8e64e33fd6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:9678a8d35d668c26ed936ca4db0e60e0385126de4993ec3e3478140a8fd1bb1e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b5c772072aa1fe85a248eadd48fca87bf8587a845884ce756fb19163d2c07cce |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:12031170a06530cec897de8b247eb0b1bf1817668c59e8b38da4854c739d19ab |