dhi.io/cloud-controller-manager
Kubernetes Cloud Controller Manager 1.34.x
1.34, 1.34-debian, 1.34-debian13, 1.34.12, 1.34.12-debian, 1.34.12-debian13
sha256:9989bd35f219ea83ae050b597caf4b08a10788f0faae419708bb0e9b0cec2202
Manifest digest:sha256:f7a32a40f7019999040120b3e290fe4c02e7e1eca58b4d93e9b89efc45e2dc04
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/cloud-controller-manager:1.342. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloud-controller-manager:1.34 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloud-controller-manager@sha256:c41aab82803bb810e9823528980f66bcf1f60aa535bbdb976a2fdff8c7cb5e73 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloud-controller-manager@sha256:519ed0e90137626f84adc35f5a0da8f2f4096940b47e6d5dc82e00e0734ec423 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloud-controller-manager@sha256:0304bbc1d959343d4cdf0174bf7ec802aa5841f29d75576376cd70c91955953b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloud-controller-manager@sha256:49f01916757a961127299aff0844da3f983acb3cf5911928fc2911a65d22a3ec |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloud-controller-manager@sha256:3145cb96beec3148687545b3b21a22a0f18d8e0732f67c011ddaf1fde02793df |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloud-controller-manager@sha256:be4993f2ccfcd0e4e4d1c2fe284b3a1858364f0b7bc8ea9578bcbd44ad53c65e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloud-controller-manager@sha256:98185115489c7f8aa4d797a4533fabbb7a62a7b2df3f4ed2232449d763148430 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloud-controller-manager@sha256:f9877a4ac1ade5771bae3328c2071fe4a71f686800c50150e8bb8539d7c3665f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloud-controller-manager@sha256:acee0feb74a0ca23a6b64596d1e83101d46eaa211b3bc824764fd845bbc8f731 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloud-controller-manager@sha256:da0ca3ee05ca22e0aaadb15109e27a02476d85ea20c5ae63b8c1bede95e3b66d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloud-controller-manager@sha256:a134403f41f215826b83312d8f581acc680d9641e5317572defba39491123d1e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloud-controller-manager@sha256:fb5a9c1fb34b766d8b495ebd0d206369bf877236d81c1eff3b0ccadfa3640bfe |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloud-controller-manager@sha256:da0f83a5843881960eb055b867b2d1c4fc43fddae10ffa51822fad2b3bea5395 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloud-controller-manager@sha256:06881e42fb3ec94adb8058b5e14c6eb328e4ddbe97f6730cd7b4cfb37d884dd6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloud-controller-manager@sha256:70e3b69cca3b20db8792599f0e0ce0944acfd3974869fe0c068c32dd26b424cd |