dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.12-debian-dev, 1.34.12-debian13-dev, 1.34.12-dev, v1.34.12-dev
sha256:9b5e78340f51750551d7dd7b66777337a31449911acfc6c178a2b32359fcb477
Manifest digest:sha256:6bbc0fa1f4d74eb1bf1dc96200f81b60dc679e3ae6ec2cc33f113e505d15522f
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:1769f62d7b0a0d725f0c6cf7245469f695235e7446b83b040991ee3b60042523 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:fbe51bd2d7592c5f2b4014edf010dffc1a16953c5df58c86bc268a75c33cc548 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:6dd8d7d8de8729b9dbc666bb91f62c057ad51732c61e4f69e84e8b08703e9667 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:80c8bfe4cbd0d2ae48cd515712d4c09d6b5339b5a5f185da40de97d91a0ae7a1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:da819357a79b457eec1b4110cfee99017cc77de4385e720c5d36d12e63d312ca |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:df177ccab613c0b15ea745c39defae78210d7c0021adb607401540b79b8976d6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:52715cb3b377fc2f83b7aee36cd9fd44198526ad8d1da8b71eeca17c8f33d1f6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:4e6d809158c92464df082d3356d58e3ade9ce7405e2c7619e3c6f9d5c06231eb |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:b59d94d18b83860168ce789fb8d94b4d18262ed981c8727c25b35774425d748e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:f15927ef05ad104bb0870fb78aa6a3ec8d8844ed2b6c2a941922aab6bf4179fb |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:071f1c25b4e09778e57021a1bc6fca823c346c24f6800d0e359b6ba864c20d2e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:5927d03139d115ef7a5bbe6945577298da76cdbd3ea596ccdb6ce18186fdd1e0 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:784b97851be8476408a3199d88a5f161044ec7a08d72987e760ee0c6a25ea734 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:396f3eaf8388597dfa946e129c263cbfd2d0f06921f067f7d2efdd16cfb2fde1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:5c86dbac8fa46e66b1e0fef965616c221a362a5a875d0be06087e1bb2fa6f971 |