dhi.io/cloud-controller-manager
Kubernetes Cloud Controller Manager 1.34.x
1.34, 1.34-debian, 1.34-debian13, 1.34.12, 1.34.12-debian, 1.34.12-debian13
sha256:99aec7927f3b7b5547f94a2bb56f80f32bd5c572715ca622486a46522aa11197
Manifest digest:sha256:22ed9ccc0362a4084210093c8a642f3faf0d49c22495d0b29bf5c18d207c08f9
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/cloud-controller-manager:1.342. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloud-controller-manager:1.34 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloud-controller-manager@sha256:de6f6281e4b90f7d4bc246980f200a89b0deecd08735519fc756c284a90fd43c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloud-controller-manager@sha256:dd8ab23e5d3c4b6bec49be7dee51f477ba1895d07db93d1cabcde606b5f51fb0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloud-controller-manager@sha256:c4b2b995f660100a02be9797c6d82e2804011f36c756fe103d2cde110298a0dc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloud-controller-manager@sha256:6c214800eea457e35ab375095bf3120ad615f0a86011f312566ef25ec5cc8f0a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloud-controller-manager@sha256:092bf1e820c7bcb2a6ece73ed388d2ee3b38189f116a07fd9033587ec864cfc7 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloud-controller-manager@sha256:978a6ddaec669ee817bc3b615ee6ef7bb23a1bcb79caf2ff18d0e1dcd324910b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloud-controller-manager@sha256:94ae4907195520745a91ba0e13738229b2b6e8e53131c9096cf2e7747231a467 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloud-controller-manager@sha256:e8ac8cee9ad5d01985d7dd22566b00b0f23b854a69521356dca495345e06ba94 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloud-controller-manager@sha256:67c8bbbf9db5a7e9ee4fff4f8ec6a59e863644df855f6f018546bb274961c9ba |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloud-controller-manager@sha256:be64eb51d52d42589289812e482d75c67ad3346a270e12fbcd8f70a735b79900 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloud-controller-manager@sha256:156dcb31318e88dc5cfe4be01bc1d6f28c8c74bc51f365ff5cfb238a32d1f7c4 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloud-controller-manager@sha256:4cc84d9aba54daef22a4dcd32c4c048c90f88ee9abe08d6e3699d7795d9ddadb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloud-controller-manager@sha256:bd7c91d7939c0c89e3dc168a85fbf634d979d45b6394ec527f888ee895b5a69f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloud-controller-manager@sha256:715f0b5f13d6df0c53d911eafea0c0477aedc32201dc18678be1529e81d9e10a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloud-controller-manager@sha256:59d5f36ffd2f58561d7e99ac3446800ac84abd0432823ff149c7b1a4951a95c4 |