dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:f5f1ae73c5b17aeeaa3ade0ae33879513b3bcb31f6e591fcbbddf233baefb823
Manifest digest:sha256:a45adc593a3fc94c4a4225f60c9cb5fa452f7d497b27fc6b5a9c4eee4c596ba2
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:76ee366b71092c11f90fcb66f8e0139f43a28d70c4cefca5e173eef0551ce42d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:0b378b045ee55981277012902c30bba074b01e68071ee38b64050acb99e02b1f |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:dc33f3204e154ae0b52727b757680e34a27ad8a731230b59a572cec98135a67d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:8b2a8d35039f28a56a21cdb1aa0d9425b4647790557e8271bfa3afa19a13769c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:10a36fe0bbfb895bc9a5addaf3e3c87152684e723f5125e1b52df440bcc823fa |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:44abd98ea9fbe023c31cccc467980967b3aab5c97e77ddbf0ae6479e9d40c2aa |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:d91e7669f5495ec60a5d251e5d84452797bf577388a43d7c8bb6f88a5ea0acb1 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:3d9a62097bdcf86acf0a3f2dce1c07cae3bcf62eac63a3d7cb841a035b2aa8c1 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:958e9c23074aa59411fb675e26f3be0f2124231f97339a57d924c1c887315e46 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:32ebee8ba104967536d2452ea686896ad4718f36ca516cb1314a1200a42908f4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:3bbf1eb424de06f7bfc80928ad0223d8b4485d4aadddb47833419587af8c9781 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:b88bb8d7c4f0c8cf44b3607098b9ebd363b0cb78b77e088b2ad463d2be52d4db |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:d88d7c8dec9168a5e3e05e4b0e23f8ba305c2b710eeb7bc15d7917f615ab6506 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:d0f065134f8d7fd2a555284da5c2f25710bb11152d2b43a76f02955775c0e79b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:80062d543c313029483604e1a6af1e4e8777dc2ebe4ea26724f83522b306b552 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:a44583c2387860133e58fe66fd35b30f87a6a75fc22a804c7067a7f47d274faf |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:53723fd47baaf46e190d808672d70b606656a9783847530a4c0be60093776c97 |