dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.13-debian-fips-dev, 1.34.13-debian13-fips-dev, 1.34.13-fips-dev, v1.34.13-fips-dev
sha256:5fea9c77f7e2c7860d3acd36b25b79adbb8b673c81ac068cc21cdd1fb2bd7be0
Manifest digest:sha256:6177e07219b1fcfc852603dd9b2d0ec154f4ed3d4b48b29822a9b629bc151c16
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:025d8a3edbd29ed4e52ae833428f1032dd838625ac476cd48ac2b4a543e65fde |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:69ff12576b4d7fb83653401c54d899974cd46647167beb812cd032b19dd73065 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:83cab3375794866a429d50547927d4ad1100b03df265da50df19619be5f210e8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:bc8e3240b97e3e3aaace0d5c4cd4e575a23b3c2707c5c58355507bc68b51714f |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:035bbb649012379def13b5d7823ed6c5ff8f496624fed31af2454b06255a3db3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:bb8901670aae0a6b0b30ccf8e567e279e3495157d8c89395fcf3a839fc71b8eb |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:16465cf3fd9612e2c21bc9051ee31ac1cfd9b7f43f95aab11608a7615d5a3073 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:43dada6e609b5f4549b7a861bdc9d311df608ca87f642825fb922102666224f5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:72a6257d14bcc34644efe324d77e2131c92ed772ac0753c117598f06b0b475ee |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:982d7457c8e59ff4721a6ecb8fa06b73195bc40aaf752d0a7e0387886ca5d4e9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:7da5208d9e653b8d130b805d97288a932d355af1614d26ae885011f83c2786c0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:63d0c6b8969b4ff40e4307e908ab6be6173c06dcbf5f3fa31c8ce0572307e9f3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:756320f4aa9f781fd88789b73c3eab39a02fea816cf480b0be1c7f776609c78e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:45a5fc75552b912adfc9140c4192671195163c4cfd4218025be99ec592d22279 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:1b0cdc61ad390f06dd426fccd87fa3797335c8f7d0e40940d10c7aec46150db2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:9f8ca48cce338d0cac0729c2b446ea0e7ea35897da44369d85eb9a48a9338123 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:47be9ee5acefb748417faca1fe5033958db1510642271f59e2329fe390e86fff |