dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev, v1.34.13-dev
sha256:116f67611b09a50120b835e7e9e59ba1fb06443ffb1a4f444242f71c1c9b8bc5
Manifest digest:sha256:8ab91436697d79c96ba497f4a32c8e4f754e3ab4ed8a396db55f0f636662d84a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:fb45c0b512416454500b05dbc84c6463b6568ea522102e7863d195701e6396d0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:21b551e5aea81df4af640680d0da2c2e55bf6003c5bb64e19762fd08aaa3a250 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:5c4fa6fb45ab23d8e9426feacf213407fa927fc9a5bc240890926d5e172cb32f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:128e2920f8435d370fe474fa48484477b8dd584bcabcbbc01a7b316216bdecc8 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:e27f5cdc0ba0e62e9fadb6bfd63a0335fd5e0a8bac888a35dc5e1ba4827656f4 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:67c92a6098ad2f1b6baf12c61ba941b63f2e03dd7a194812879d55f590bf9f63 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:b9982d71f5caee714fcb9f406e8353769ad7ac97782bb90d161a3405d883e068 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:c0ec7ff89a97791cd02744c0f4c53523b47a0278c7e08537b5883f77f50f579f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:a3f3baec581b796d1754051edba8397a5a48cc022a6f0c1534fb2ebce2e877c9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:bec8cea01967a037fde69bb07414b6e791eede4714c55490d64732425ad0c662 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:236fe1d7b893257ef417141d07f41e8c85b7ea12a6d719322d68a43401863767 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:c47f6e338977b0c522772f791cc0954132e7f2cdc041a6696dc968e9c62430a8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:e3b7a903bde9e6aa8562fa082cd37c2a63a1e666cba1ddbe4647837562601406 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:e747f4a0054c61ee2a3f192375b4fb4080de37df3414c59c7ce6313079b115aa |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:7df5ab4d8f01eb7ae051ccd2d6bc10e9be73f8da4c2035fba8ea22805c245d1e |