Sign inSign up
K8s Driver Manager

dhi.io/k8s-driver-manager

K8s Driver Manager 0.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

0-alpine-fips, 0-alpine3.24-fips, 0.12-alpine-fips, 0.12-alpine3.24-fips, 0.12.1-alpine-fips, 0.12.1-alpine3.24-fips

Index digest:

sha256:49d4152d6c9af508d94fe80a0e90ae5e1956e4a9f41ebcc879e5a2a44ca2a2f4

Manifest digest:

sha256:a27639e783cd0200dac8afebdd14f89d3667687745dd1dcc6e5be0aaee39c59d

Size

18.29 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8s-driver-manager:0-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8s-driver-manager:0-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8s-driver-manager@sha256:312df51e3e5805a5b763e8d3dbb153451234b0c6533b7e8099142c89ce4b5a03
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8s-driver-manager@sha256:cd2677cba99aef306228c00f842ba0e3facd33a2ec4b115e9e494a252841bbe6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8s-driver-manager@sha256:e6b88fae5fe0c3670ca1bbde95ee6ac70e18a9d6763812a9f4782c09ba3cd57b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8s-driver-manager@sha256:9a9b697dc26a1c657998b394d6644942235eae437f1472b113d716c5e212f06a
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8s-driver-manager@sha256:156d0fdaeeab30d47bcf12ef93b6f47b74db5ea6f1ff09dfb17094c308679a5c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8s-driver-manager@sha256:0982118e0aa3b38d5371e0a90964ceded9265576d6495077bccedf3d1aca34f5
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8s-driver-manager@sha256:c1830de13e1004a101b8bb4add64684a13cf3be8c1e28c1200bcba4dcf3817ee
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8s-driver-manager@sha256:656f47670a65dd2ba5d2bd2df863a2fcfc1dbae12b7b9df16280bc856d1cecf2
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8s-driver-manager@sha256:60c8e3e917fb34a4a6e703bed387c5d6424318aa8af1ff1e659a836de069b00b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8s-driver-manager@sha256:8cdf04dcceb909260c49a002668c810e3c3bc871d981d00a8a234855682f738a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8s-driver-manager@sha256:34368bc60e69b13b92cd35617ce54f00a69b3f919bbb8bb7d5cdf3e865313572
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8s-driver-manager@sha256:b112957969ab9d3c27cebf6331df3fb51fe152262db55acf6cffb3e256b10d57
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8s-driver-manager@sha256:b9142d8bd651bc7561dbd5195269a3b1af5b7d9ee8a38de83381697f0b05f41c
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8s-driver-manager@sha256:7dcde6c48c012c213ad0550e494c31762934cb6f930ac31ceb2350f5e360f4af
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8s-driver-manager@sha256:68b551a010d99fead1157222d4abb328fb15de251defff39801c50d9c236b425
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8s-driver-manager@sha256:d0c007d9fb6fb33fc02048ef04f8f182821808a2c77f21cf664e04e8041980e9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8s-driver-manager@sha256:e8d57806d7f971347e36f08e5e11934f0c1812ca7951355868aeae85499dcf81