dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:6b254cfcf2a53d8f8a6ec018d1c8e180cfc8c98102498552470e812399b7a6f7
Manifest digest:sha256:a24e4bd0e09097bd99d83365a84f34d2edb0ddf8b9b0e58cf5f11a426e2ed3ae
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:9af39cd7a6468f0ae548d342d53e28d37db5eb53ba634d429d4b1d87fdbc4f71 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:c4ddb91c9f3c0ed479a74e34c606a1c84effcc376107840560b61475c5a9eddc |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:65a59cbf2b193fa61827a1d6a0f60cf28a2d9210c42bb22a448b5e0a2cda00d8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:d32b1b8c80985bc51675027f2541564c795887d9bb07630646d015b0b9541354 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:30714f4d7859de476338a88935e66ec3e7e46c31e32112c4f087d9472135e2b1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:f04db32545126c3398ccb807cc79608ea78b4e842583ddde1e1792f172aec07a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:1d595b2446f2b5ba528e8da45491df60b0458b2b6a8ff02369c947d3c0253be4 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:bfc8557e2555c646f7a8bf3c7c2e3eff5d8963a973da737538d996cd79ede160 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:b8ec2581e32e00c4d6e870973bbf32dc71f39412810ec032982815a651f315d9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:9c58c7fcc417c1898a5913f93b83fb1d9b2770a97b7ec42dba787659e3401c45 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:1655ac3765e38cd81a8455f36739de4cef7687ff5fdd0a7b6c89d164f8f92070 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:9d6420f24b9bd13214d21cb6d3fd3ff45d3d15383413893906ad5687efd1a767 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:72d864fcf06707d886be783a44d1bc99ae7e6f8e07e7f728df0dcd09e9f59dd5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:72f59e103cbda84bd6da7134006c0c24c9d12997474cebff5c42c6fbe555df3f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:d1f634167e4cf4253e546741784c0d5faf45c74f55da1ee68a475dc42aafc99c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:4e40b923f2b2ad01be6ec32856f0578e38bb6afbb9b4220ae0da567b8431b19d |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:e579dbc4457c6e24df91f528c370abc8adb7e6d9b98dc9ce023652bd83fadd4a |