Sign inSign up
Kubernetes API Server (kube-apiserver)

dhi.io/kube-apiserver

Kubernetes API Server 1.35.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.35-debian-fips-dev, 1.35-debian13-fips-dev, 1.35-fips-dev, 1.35.10-debian-fips-dev, 1.35.10-debian13-fips-dev, 1.35.10-fips-dev, v1.35.10-fips-dev

Index digest:

sha256:bab9217d6d96b33b678611cd07a5234031308f2e946c6cedf4a5865ab604d25a

Manifest digest:

sha256:6c4a16639087372bfa26f84e9938fbbcba8a9083c6f2b0e4dcd527fc405268c8

Size

76.06 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active until Feb 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-apiserver:1.35-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-apiserver:1.35-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-apiserver@sha256:2de8411793c0cf54f7b99e9324081e04699bcd1bb5ed83bd45c89901bc72d842
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-apiserver@sha256:0094da67fe299a82940f1c32d6945c611a2008d8edf1b33dd01bfbd53ad99c55
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-apiserver@sha256:2f4e398ddc56a01d737bcb83dded4b74de376cdff491587878c22e07a30c1c43
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-apiserver@sha256:84597c68b1d53f2e5c5ac2ce642b87c02358c2bbf34ffd974ce716e57f77ebcb
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-apiserver@sha256:c39e279c2882b3afe5290e7e48af01db9112b10d82222e34d552d903945bdfdf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-apiserver@sha256:a37c8a6e931dbbe4f29ecc4ca0bd54a89cd6a7bafbbbbe6a014ae8df5f6b569e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-apiserver@sha256:9306d5c5bb309b9df0bc1057f2727f47bfe8a639efd173550144ef6f43015b70
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-apiserver@sha256:af4b3c320f1f42fecf32fb25ae97ac45436f313dc3396a5a30c5f35b332ad4ec
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-apiserver@sha256:13fc33c9a5494f061db038f2cfb4975673b616a27588061901fe4c0223f4161f
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-apiserver@sha256:4d01f21e49a474a351262f342e74d5d30189bacb914585a45608ff7c5a3f7856
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-apiserver@sha256:db64c3186cf2bd91da194b33ae6878767b210487360ae873c8ea5a2b8cb5ec6a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-apiserver@sha256:d263c014fdea9633fabcfddb56f40e2c09fbd8846be7e7cd9e9482e53ec2fffc
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-apiserver@sha256:1595e1eba7930bda756bf854cf9214201638e287fc67f11d2e83a5b8c1a703c3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-apiserver@sha256:a88b8319dbb07ffa886e601df9cfc1979fbb14de30ac7a1a70a92cd129a27732
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-apiserver@sha256:5af490c8a851b367fe5d425da04267ec6436b95948af2d0d67b3f1bc4f259165
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-apiserver@sha256:3443639414991a62332f806b7e38c29716135a187efc52d6bb518339a2b93c8f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-apiserver@sha256:fd4d586995d63b8ab839c7f797de7e6f1074a711545d396861dd6c655959dccf