dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.13-debian-fips-dev, 1.34.13-debian13-fips-dev, 1.34.13-fips-dev, v1.34.13-fips-dev
sha256:8ee686e855b1c7b60c755c86f55f0effd63ceac213e538ac6351e929e965978b
Manifest digest:sha256:219ed6fe9ddf99e55c8a68526b190ff1368c6d8ef5f05535e2e31e07d316343d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:4f71785a4ef60cf1415b056cdcd0e63dd985418c066cb94d5e8e507901fccd1b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:c424131c5c4345453a283be414aa39f2e3436831bfe6f087fb58b6d911fb22af |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:5c210e436b126a12a67aee09a95006aea5010c29432021a74444959eb6c335ab |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:d1bd5e54d433afa10a2291cf259c2facc4f8045713360a089aa8b878dd2d9f90 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:171754a3bb4d3246d09eec489b42e39bd35113cec320418f6813abb24742c011 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:28420e6d45a186bbd6506d784474094f2a5491050292132530483841531e6f7a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:f3c031a33877f9dedd09a80281e3132a402a90325e1682d6ccd4bdca35374a7d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:e936beb3ae44f1d7ea9085d857687bff6f4bfacde21f060fc9023b3e33707eee |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:ef05a258d5b384a30630aa62568f5ca0400f5ff975d2f49fbcad4b3239772ffe |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:867ce61cf335a42127ae592e3c4a6b316807e35ac1bc906cd05f2f6173fae389 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:b3284ba413372de50b23db0064396815c922680aa109b3fa14b3596f5eb690ef |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:09342b5393e04ab9079600cbce6d87ed1bfe21fe8e2c2151b18c0a87ff6f58bd |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:d5a1840b2ebc267e00882ec1c7bd7b7cc0dd962f89651d2838e9f353070288d9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:4ef3a919c1b5542af6d2da93e5189e0f1e4c161f852016ddfe03333402ccdf18 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:1cde584917c636490b747f0b33a02656021afc9aeee036516466e3cf50e54793 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:85f151470d4fe59c79ddf26889c809cc7a0837038e6da4e443db8afd0e3355a7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:a7ed1122e5be288dd18b2028e8362210e60ba5555f0023af8b29a3b2fdfd4b8e |