dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (dev)
1.34-alpine-dev, 1.34-alpine3.24-dev, 1.34.13-alpine-dev, 1.34.13-alpine3.24-dev
sha256:5297ea71d7bbe704da9bb02192c6d378450cdd62837cc1262af288c6e62e0b49
Manifest digest:sha256:d0020cf74151e0546ac595c9bd4edbc45c5303ee116781fa254f6c91b5a5b734
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:310ed4c16af0cd2630abdcdc3848b2ef8732e279796f17754e803ea04f45889d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:5a95e65a95c9c9ab1ad02963b43da7adf650edce951c3e17228f0c2bfd5aca30 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:fb74ca1afd9e506cab8c3e24bb259d38ea5d12986980f356c21dbce503e34afd |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:68277a0b63c0eea9f10b01b3c3adcfeb3733d0ea08af8b675b9f09bc4d535c52 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:17528436ef51472372cbde66bb509452e6c53b364653b37e6067abfea80fd3e8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:1ba5fe6d52a25d63a903dca4f82b0ee743c2c851340ed6b50e534317db7afbaa |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:f5244e8fba4c833e20a4a4f05f209005910ed542e2e332ade7baa78c79a986d2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:796541ba199dbbec700ab4456187377a0c00bd87c944458805bd26b7a31a59da |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:680c65bb597e4271a0a5e6b8ac7960a603557d2ed1a0c601a8f77c91f1636750 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:f50669c3bdedad56bb1910432c588d5054dcb2fc058e84e6801ed8a734c7d5d1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:15a40be7cc6aae8a58822c20ac4602b012d9e94aa984ef662296a0587337fffb |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:e3397f844f90cc3d91d51422afb6975ae397e03c5656d2658620480b524f0f2a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:efd865181781e706d8e0aea0c30eee415d654fc30042b9cddff04765cc1e7ae0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:acf5e791b52c660bce2377414c8b44e7b77d4701b4f9f98fd509d91f2319b5b8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:4d4e1d3a90808cbb7b3a2dd74e2d3922b1c4be262eb460ac1d04d97eac2547a2 |